Static task
static1
Behavioral task
behavioral1
Sample
354db0893d6fea1a6b2d41ae3f707f40_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
354db0893d6fea1a6b2d41ae3f707f40_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
354db0893d6fea1a6b2d41ae3f707f40_JaffaCakes118
-
Size
23KB
-
MD5
354db0893d6fea1a6b2d41ae3f707f40
-
SHA1
5895dd833a7a2728567cd1d390cc3e1916b155a7
-
SHA256
b2efe19105afd602c8bc8e627d81c6fd86d6c6f64f3d40eed346630db6f103b8
-
SHA512
cbee41286f659abf01450249b451925da6d125c91c72ec079e575355091dcc30e02c07f6f0d5288fbb028610b415a6eef8047999894590adcf91c1d80604f126
-
SSDEEP
384:P5/EDqg+L69gJgxMzrveqttbDca2SXIHBbVB+Vppp7nWoyJAA1o6v7vvxlL8+WFl:PKDqgiIxOhttfca2dBbMJ1aFG6v7D8V1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 354db0893d6fea1a6b2d41ae3f707f40_JaffaCakes118
Files
-
354db0893d6fea1a6b2d41ae3f707f40_JaffaCakes118.exe windows:5 windows x86 arch:x86
b709f4a80892edf5fb5c820e5cce01d4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
RegOpenKeyExA
user32
MessageBoxA
shell32
ShellExecuteA
Sections
.MPRESS1 Size: 18KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE