Static task
static1
Behavioral task
behavioral1
Sample
21e7cf020cec93c5f532adf3d3bb489a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
21e7cf020cec93c5f532adf3d3bb489a_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
21e7cf020cec93c5f532adf3d3bb489a_JaffaCakes118
-
Size
27KB
-
MD5
21e7cf020cec93c5f532adf3d3bb489a
-
SHA1
be5032e158b2c5e3aa54e36543a7bdad73a4a506
-
SHA256
6445efd95dfb809f565ae783bab06c9918ab177cfc6cde07809102cde2dcec56
-
SHA512
6c06e266e9678916c183b81b713ab9db35a8f0baa73ff38e631e5bda7aa2136b7346d6ced84c403ca3a2bd8b52e6d9e5239d5e7c718a54318b4b7fb102bfbeb7
-
SSDEEP
768:hh4hP8VXff1vJcINqg1se9uVMmbz3TP9PSv7D:EP8tff1vJcITBEuA3TVP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21e7cf020cec93c5f532adf3d3bb489a_JaffaCakes118
Files
-
21e7cf020cec93c5f532adf3d3bb489a_JaffaCakes118.exe windows:5 windows x86 arch:x86
8a924206d8bd541bac2326c3b9ae7a08
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
nss3
PR_Now
msvcr120
atoi
Sections
.MPRESS1 Size: 23KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE