Static task
static1
Behavioral task
behavioral1
Sample
171b1cc4f14534f215092bfd5e802d48_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
171b1cc4f14534f215092bfd5e802d48_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
171b1cc4f14534f215092bfd5e802d48_JaffaCakes118
-
Size
176KB
-
MD5
171b1cc4f14534f215092bfd5e802d48
-
SHA1
b7a666f6fbd4dfdb8fd9a62fbfd26ea74c2a97d6
-
SHA256
68db82b35b5d70c447dfa5d6bff573203f8e00f88e42d0db0ec4b1a2e02df637
-
SHA512
e981110501d01cb9fd7dec1f2c3b6462339cb14eab57d6705a0636015d0ec18b809fbf27c7c48187fbf5f578b485b6ac7b6bc15ed06bc83dbfaa193f468bcc22
-
SSDEEP
3072:UKrXZZrGe7YnOZK+Vyr8yIsKx3oEAns2/U:UKrpZrtZdym8n1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 171b1cc4f14534f215092bfd5e802d48_JaffaCakes118
Files
-
171b1cc4f14534f215092bfd5e802d48_JaffaCakes118.exe windows:5 windows x86 arch:x86
90cd61663ced8107720a6741348d735c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
LoadStringW
advapi32
FreeSid
shell32
ShellExecuteW
ole32
CoInitializeEx
oleaut32
VariantClear
Sections
.MPRESS1 Size: 50KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 122KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE