Static task
static1
Behavioral task
behavioral1
Sample
055f094a56b3e48ae9abe18871b5cf87_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
055f094a56b3e48ae9abe18871b5cf87_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
055f094a56b3e48ae9abe18871b5cf87_JaffaCakes118
-
Size
126KB
-
MD5
055f094a56b3e48ae9abe18871b5cf87
-
SHA1
435dec416e38fa7e628fab026c16612942eb49e1
-
SHA256
4c91755579cff080dcab1145fdda6c6b0499305092b65552aea5714118a789f5
-
SHA512
61b56c402d6437c5949fdb12409ddac94526745654eb73805827f865babc6a364af3b870dd562a73d28c42a46904707da8b745011febdfadee31a6910f06ad1d
-
SSDEEP
3072:KIKRkyox1bix+qEhXKYh9FAHwQZm6NPEwJk3:Oax1ThXKgbAHwQZmUPEw6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 055f094a56b3e48ae9abe18871b5cf87_JaffaCakes118
Files
-
055f094a56b3e48ae9abe18871b5cf87_JaffaCakes118.exe windows:4 windows x86 arch:x86
c3e4966cc33a20e6ca36b972c38ff287
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
IsIconic
gdi32
GetStockObject
advapi32
RegCloseKey
binkw32
_BinkOpen@8
winmm
timeGetTime
corew32dll
??0CStr@@QAE@XZ
Sections
.MPRESS1 Size: 119KB - Virtual size: 344KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE