Static task
static1
Behavioral task
behavioral1
Sample
34cdbbda5f7c02ca179a366232adbb96_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
34cdbbda5f7c02ca179a366232adbb96_JaffaCakes118
-
Size
2.4MB
-
MD5
34cdbbda5f7c02ca179a366232adbb96
-
SHA1
50d1dbff0f4cecbd8649ef54ad2084376795db5e
-
SHA256
6f69d97a8407fe9bab7cbb068386e7af2ff805d9509c0061c876a94d30a3f809
-
SHA512
1848e32235b8d203384bec815aee4c686136a2ad9f1adf97f64aa32b930925bf8ef0144379bda2f1a529e433f21c587d97658c8ebf451416aaa1a8cc0c46ff9a
-
SSDEEP
49152:5Xja8XCumXI9NdbYjXsSrDVmqlAUgSE9n0xe8zmHafCss:Ba8XoUkHllAUPEbaas
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34cdbbda5f7c02ca179a366232adbb96_JaffaCakes118
Files
-
34cdbbda5f7c02ca179a366232adbb96_JaffaCakes118.exe windows:5 windows x86 arch:x86
d9362ccf7828b415b9cc03e731a349f8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
shell32
ShellExecuteA
ws2_32
listen
wldap32
ord79
ole32
CoUninitialize
oleaut32
SysFreeString
user32
MessageBoxA
advapi32
ReportEventA
Sections
.MPRESS1 Size: 2.4MB - Virtual size: 7.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE