Static task
static1
Behavioral task
behavioral1
Sample
4fde548f1ba45d16f63d33e6c182e078_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4fde548f1ba45d16f63d33e6c182e078_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
4fde548f1ba45d16f63d33e6c182e078_JaffaCakes118
-
Size
68KB
-
MD5
4fde548f1ba45d16f63d33e6c182e078
-
SHA1
e5960dda648f5e74ca18119c3e5c58573b047fc4
-
SHA256
2ce962a7249ea4323842fcb46e0db3909dc6e953d2a77287ed6fe559c63d5e4d
-
SHA512
9a0247058b4a61d51c39017bd51b2b2e95240b211de9c96a10c1ba49c17ba34801caa2656fa3e35a929098ee7598d0e8c1b53ccde8d141d3cab3bc23ff41b1aa
-
SSDEEP
1536:gFRrzX15weDfUEE8w+pj2n1ILT0c9tG65GZTr:gTPXH4EHpj21ILT0hcWH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4fde548f1ba45d16f63d33e6c182e078_JaffaCakes118
Files
-
4fde548f1ba45d16f63d33e6c182e078_JaffaCakes118.exe windows:4 windows x86 arch:x86
d0083b5a269dd789ab5bcf3a553b9d17
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
GetDC
gdi32
GetObjectA
advapi32
FreeSid
comctl32
ord17
version
VerQueryValueA
Sections
.MPRESS1 Size: 60KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE