Static task
static1
Behavioral task
behavioral1
Sample
429cf0e0c7487df5b38ad809b68fef32_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
429cf0e0c7487df5b38ad809b68fef32_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
429cf0e0c7487df5b38ad809b68fef32_JaffaCakes118
-
Size
13KB
-
MD5
429cf0e0c7487df5b38ad809b68fef32
-
SHA1
1bf2b759deda2d7fcd79694a6a28112432c71739
-
SHA256
73895073f259a3734dac1a5dd2b8066bdb9d11b818f2333fa7b94bc183559602
-
SHA512
ea6e3631880f6fac0d19ca18190f0185ca8ee72899a9659761b9cdc82ab21e3699dd97ebee0a24aca54c43a7ce0a023439a482f65a58be294f2b94f718dea941
-
SSDEEP
192:842f9knTe7H/x2PSNNmPIA3/ibKZtQVJKUr5+75FvBvJgxMLdr0Z8Ha:842STe7QCNmAC/97vvxlL8ka
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 429cf0e0c7487df5b38ad809b68fef32_JaffaCakes118
Files
-
429cf0e0c7487df5b38ad809b68fef32_JaffaCakes118.exe windows:4 windows x86 arch:x86
13af58df7c917a992e463c9c180834f0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
mfc42
ord6375
msvcrt
exit
user32
DrawIcon
Sections
.MPRESS1 Size: 7KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE