Static task
static1
Behavioral task
behavioral1
Sample
31d37b70d2fa00f655b87481643417bb_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
31d37b70d2fa00f655b87481643417bb_JaffaCakes118
-
Size
19KB
-
MD5
31d37b70d2fa00f655b87481643417bb
-
SHA1
cb6b8b035248997fb01cbaf63b4ad2b9fe5c5def
-
SHA256
ff2a46b233934f476d946550eb7119e9c70f646bf67825d6c737eeff67b675bd
-
SHA512
46fc0c11b2db0139b4650914f8d958241b5d6e088dca1c000702d0db8d49c3a2ce28b83257a23e4add3c2ff107322043b868f8d043f1a1102a9fe0ef3b991952
-
SSDEEP
384:GdoDg09w72840n/LuDDI2xzi4gw9MvV7vvxlLlGf0WnZmNWJjE:m0q728TLqIOz1gtN7Dlpj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31d37b70d2fa00f655b87481643417bb_JaffaCakes118
Files
-
31d37b70d2fa00f655b87481643417bb_JaffaCakes118.exe windows:10 windows x86 arch:x86
f77f302fbf9e7955e4f3b3d1f99ca98a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
RegCloseKey
msvcrt
exit
ntdll
RtlCreateAcl
Sections
.MPRESS1 Size: 13KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE