Static task
static1
Behavioral task
behavioral1
Sample
4525737be3d8ed9e137d4c9c8cff5c46_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4525737be3d8ed9e137d4c9c8cff5c46_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
4525737be3d8ed9e137d4c9c8cff5c46_JaffaCakes118
-
Size
25KB
-
MD5
4525737be3d8ed9e137d4c9c8cff5c46
-
SHA1
335f5daf45aee53c2fed49ce6e30a00714dc467d
-
SHA256
84327efeb1cfabc664899a2de156f4a3db185593f2e5e3ef2e872d3e40bd633e
-
SHA512
ce9b456c2f0cf0501df851222a8cccaf82c3f6ab66ac49d2afad7804adf1827f73e11b481aa36c23b4cb0e2d99f99ac1315116aab60eaa6982783c8b26e392df
-
SSDEEP
384:vFPWXlYpV/rywCgxUlKrPPvY5onn3TmCy7CGfKkjeBXfEfbwf7vvxlL/WZfdWy5J:vFeuVTL0gPXIonny1fMXMfbwf7DGN5fB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4525737be3d8ed9e137d4c9c8cff5c46_JaffaCakes118
Files
-
4525737be3d8ed9e137d4c9c8cff5c46_JaffaCakes118.exe windows:6 windows x86 arch:x86
0875fc3b146208efcc5df79fc55f5fd3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
exit
ntdll
RtlUnwind
user32
CharLowerA
cabinet
ord23
advapi32
RegCloseKey
Sections
.MPRESS1 Size: 19KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE