Static task
static1
Behavioral task
behavioral1
Sample
3b1b6c21f889d5d386dc5c1c9002f6a8_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3b1b6c21f889d5d386dc5c1c9002f6a8_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
3b1b6c21f889d5d386dc5c1c9002f6a8_JaffaCakes118
-
Size
28KB
-
MD5
3b1b6c21f889d5d386dc5c1c9002f6a8
-
SHA1
180fa3a36a850bc585bdb67c68c7b33028960d3e
-
SHA256
151759efc679429bc092540953587a3cd6464c0025d15c2f7eb1f67aa0b73328
-
SHA512
1148a4ed9e4357d85cb8b4df10a58331c4fb594613fd1829446c9050622bec493213506d7098fbd0b729c805b1f69279340efbd8f985e2e67129ef3f5862c69f
-
SSDEEP
384:z/qkQZyR0ySgGEvdZwUgBnCYddif2CR5iIUR3Lo07jQpMKSuM+em7vvxlLygWBoJ:2kEvXEvgBCYdO3oLo0PEM3uMtm7DyQJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b1b6c21f889d5d386dc5c1c9002f6a8_JaffaCakes118
Files
-
3b1b6c21f889d5d386dc5c1c9002f6a8_JaffaCakes118.exe windows:5 windows x86 arch:x86
af6b726ebf8a59ceb55ad00c3e85e611
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
oleaut32
RegisterTypeLi
ole32
OleInitialize
Sections
.MPRESS1 Size: 23KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 972B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE