Static task
static1
Behavioral task
behavioral1
Sample
0bb10f0adac08abedfabb9301dcfbb63_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0bb10f0adac08abedfabb9301dcfbb63_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
0bb10f0adac08abedfabb9301dcfbb63_JaffaCakes118
-
Size
351KB
-
MD5
0bb10f0adac08abedfabb9301dcfbb63
-
SHA1
54a7ebfb8a6699f5e88aca1b07939cad831f0c4e
-
SHA256
7f813739b014ce0ad6976ef4f0fe17e90404ecbcb6772459ed793418302e048d
-
SHA512
28a05943a8cfffcc1f89d4e6ddd7fed35ad5500f4ea3c23a0ed521e96da664097f8f83fcbabdb65a46082ef0d90ea0f1a8726c1b0a579771d85bb6a39fb91b11
-
SSDEEP
6144:DGhNueXg7BGZStCpkhw2bVAhXBRHWeSZ5YEKRE8Ya997cnzQJjHQX7yJOKX:DANu4g1GMt/b2B38ZtKtYgdCMT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bb10f0adac08abedfabb9301dcfbb63_JaffaCakes118
Files
-
0bb10f0adac08abedfabb9301dcfbb63_JaffaCakes118.exe windows:6 windows x86 arch:x86
ad10dce56047bad68788fa472c17c36b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
RegCloseKey
version
VerQueryValueW
crypt32
CryptMsgClose
ws2_32
sendto
wldap32
ord211
normaliz
IdnToAscii
wininet
InternetAttemptConnect
shlwapi
PathAppendW
winhttp
WinHttpGetIEProxyConfigForCurrentUser
wintrust
WinVerifyTrust
Sections
.MPRESS1 Size: 261KB - Virtual size: 768KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE