Static task
static1
Behavioral task
behavioral1
Sample
207fcef818d7f56b35648895585d8e40_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
207fcef818d7f56b35648895585d8e40_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
207fcef818d7f56b35648895585d8e40_JaffaCakes118
-
Size
13KB
-
MD5
207fcef818d7f56b35648895585d8e40
-
SHA1
0817fdf5915e36679841618b6309f28723aecc6b
-
SHA256
6dd1ec99c29c30390cf5e837cbac17db7e7a059a84d35cc91d518fbded274019
-
SHA512
76f38fa3763743777a38e59cab20fa170436b1bcc502ed5b1ad1fba4874e2b136dfffe453f20e6799c8b56bebb691b19833061a75b091ae7151b10ffcaa77da9
-
SSDEEP
384:K0F4m7Jkx7NbOXXuawYKfUPztOjjO0s8jYpuXz+TL:Kw42kx7Nanuaw6Pztt8jr63
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 207fcef818d7f56b35648895585d8e40_JaffaCakes118
Files
-
207fcef818d7f56b35648895585d8e40_JaffaCakes118.exe windows:6 windows x86 arch:x86
4c2f95481776a72ac04889414560bdf1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
RegCloseKey
version
VerQueryValueW
user32
wsprintfW
msvcr120
exit
Sections
.MPRESS1 Size: 10KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1024B - Virtual size: 1011B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE