Static task
static1
Behavioral task
behavioral1
Sample
0bb86fac8469150894b6fd796da5ed27_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0bb86fac8469150894b6fd796da5ed27_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0bb86fac8469150894b6fd796da5ed27_JaffaCakes118
-
Size
19KB
-
MD5
0bb86fac8469150894b6fd796da5ed27
-
SHA1
bf4deb6f7ceb62ec34459c08c117b6371327d157
-
SHA256
4b5b81290cece4ffdfdb5bec2d3683a27ff9f207e3a9e8fc3f4014c662adc05a
-
SHA512
0db50e8f74b39e7a43d71e78ab6036efb6a6596259ce842a90aef32aa33cee5b1cfb795ba5021bfc122dc06ada6e6704f01dc3e0781fed223ff7f40c04558964
-
SSDEEP
384:+w/bfW6819655XC+sMy38Czb2cKzx5UX7r0wX7vvxlLEHL:P/bxltsz4cSxWX7f7DkL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bb86fac8469150894b6fd796da5ed27_JaffaCakes118
Files
-
0bb86fac8469150894b6fd796da5ed27_JaffaCakes118.exe windows:4 windows x86 arch:x86
382f778216df18359c685e84b687cca1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
ws2_32
recv
advapi32
FreeSid
msvcr71
exit
Sections
.MPRESS1 Size: 13KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE