Static task
static1
Behavioral task
behavioral1
Sample
4ea84293df1cbcc2ebce6f27a16afd2a_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
4ea84293df1cbcc2ebce6f27a16afd2a_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
4ea84293df1cbcc2ebce6f27a16afd2a_JaffaCakes118
-
Size
24KB
-
MD5
4ea84293df1cbcc2ebce6f27a16afd2a
-
SHA1
c06bc15736aa12cd9b87466bdc831b473b590f45
-
SHA256
91e9549ef3d793247276b3c39fccbdd4f22eb946a25c3ae83350c43cca92e94c
-
SHA512
a1088d41c3364a4bfbdb1ef6d74f2782ff57c74a40f969801a6ef324cf0f86e725265d5e679d6e9ea56ff6ee2724f2e9d1527039c939ead0b2fd17ff8f105bb7
-
SSDEEP
384:gtXE7h8P8BiJa0sJcilboUNtWtsRZAA/ZR23kbVc1FV0qMqiT+5iEQeMrzcLTltx:gtvEBJJbo5mRZAARg3iVc130qPZDPZEi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ea84293df1cbcc2ebce6f27a16afd2a_JaffaCakes118
Files
-
4ea84293df1cbcc2ebce6f27a16afd2a_JaffaCakes118.exe windows:6 windows x86 arch:x86
445404dc650d6e13da4a7f555ac2c3dd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
_iob
wsdapi
WSDXMLCreateContext
ws2_32
WSAStartup
shell32
CommandLineToArgvW
rpcrt4
UuidCreate
Sections
.MPRESS1 Size: 18KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE