Static task
static1
Behavioral task
behavioral1
Sample
09fb7227175b7b9e9493ca9477772c3f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
09fb7227175b7b9e9493ca9477772c3f_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
09fb7227175b7b9e9493ca9477772c3f_JaffaCakes118
-
Size
13KB
-
MD5
09fb7227175b7b9e9493ca9477772c3f
-
SHA1
45cb3d35c035c717989a5b0268e2749168ec44a6
-
SHA256
58c3db886b907b3858bb6979765dea54e306a259c001fbd6ebd2e7ceca000fc2
-
SHA512
372046d4957ff5813332924b942db1a15bbe2004f81d44975589aced0ad8319a82fbecf784baedc238adbe23b4eae921212cb4c46d9a92bd1a1b29e975aa6242
-
SSDEEP
384:7ews8mgc4e5nsUCwfBw6ZpRWhnXelOIjITlEYpjW9ZrbW0:dsOc4rUCwf+6ZpRenXXEkE5V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09fb7227175b7b9e9493ca9477772c3f_JaffaCakes118
Files
-
09fb7227175b7b9e9493ca9477772c3f_JaffaCakes118.exe windows:6 windows x86 arch:x86
51704c5dc0d00b817927d3a50acbe425
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
exit
advapi32
EventWrite
ntdll
RtlCopySid
rpcrt4
RpcServerListen
Sections
.MPRESS1 Size: 9KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE