Static task
static1
Behavioral task
behavioral1
Sample
0ba1cfb5d1dd9f5f9bc6d19ce73ebb3f_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0ba1cfb5d1dd9f5f9bc6d19ce73ebb3f_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
0ba1cfb5d1dd9f5f9bc6d19ce73ebb3f_JaffaCakes118
-
Size
34KB
-
MD5
0ba1cfb5d1dd9f5f9bc6d19ce73ebb3f
-
SHA1
7a6556380561318b41bda4a752d7e09de4084ec5
-
SHA256
779bd4d85b254e16cf348e3ddc313a2187a995a12534d105b69686edaa0a0f6f
-
SHA512
3e535030b151456f521363bd9fe3461db8aacbf80639693295af234db15474ce09ed45520b4c1063e236e291573618582d55222ac705522f104c5a90e8a27b1e
-
SSDEEP
768:YROIsiajENZtJRkTPUBfMVTP5Qjx6DTemsvh7DFdvgnYrr+jqedwyZ:IOPjEzRjBEVSj8TemINgnMSqedJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ba1cfb5d1dd9f5f9bc6d19ce73ebb3f_JaffaCakes118
Files
-
0ba1cfb5d1dd9f5f9bc6d19ce73ebb3f_JaffaCakes118.exe windows:4 windows x86 arch:x86
1f72aa52e34ac8ee1b5b2a4b9030b57a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
imagehlp
MapAndLoad
shlwapi
StrChrW
comctl32
InitCommonControlsEx
user32
CharNextA
shell32
SHFileOperationA
Sections
.MPRESS1 Size: 22KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE