Static task
static1
Behavioral task
behavioral1
Sample
15044c6e3ef68b4229a8d3632f2b44b1_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
15044c6e3ef68b4229a8d3632f2b44b1_JaffaCakes118
-
Size
90KB
-
MD5
15044c6e3ef68b4229a8d3632f2b44b1
-
SHA1
fcaacd56a1233561a54bb59d997bf994304c5cc3
-
SHA256
2e9ebd7fcbeda093f900efefb0eb8b99b2b8e2e42fed7914eaebc145807020d6
-
SHA512
7c5d9396b22e589e81422f8a81b9655f8f830a17d8d60cdde9d5e8dcbacae6202bc80ef614e446faccb51bf44b9656f5ea973edbb2ee66f2c9e586168276a92a
-
SSDEEP
1536:1mMACq2zy8B7v+gWquliY6WLGbL8jSjqVIhN1s7saLTF4KY5Q2CTgyTcPa:bS2zH0litWyL8sqB4oG3u2CT/TcPa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15044c6e3ef68b4229a8d3632f2b44b1_JaffaCakes118
Files
-
15044c6e3ef68b4229a8d3632f2b44b1_JaffaCakes118.exe windows:10 windows x86 arch:x86
3211300411c97f51ecbc006965a7a895
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
FreeSid
msvcrt
free
rpcrt4
UuidCreate
version
VerQueryValueW
Sections
.MPRESS1 Size: 84KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE