Static task
static1
Behavioral task
behavioral1
Sample
5d770c9d9327cfef8e7690b22ecc896c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5d770c9d9327cfef8e7690b22ecc896c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
5d770c9d9327cfef8e7690b22ecc896c_JaffaCakes118
-
Size
134KB
-
MD5
5d770c9d9327cfef8e7690b22ecc896c
-
SHA1
1b7fad11f1c995bf04edf5f697f67d67a9d3b946
-
SHA256
7bc227dc0cf84355c0f5dc84d7c276919cb0a8e6edbf732be16f78699fc283a9
-
SHA512
e2cd95506f09075fad0784f7697c2845aaf25739cfa597e9e96cb5157a2609ec7d41c9455017aa776a1ac66b787c8400abb7b2dcb2e72a337b3d19ec57dc3980
-
SSDEEP
3072:lQNiLkbXbwymecghU1K9wsASezmCRSWUWnpHCwKt0GzjD:+NiW8yvC1K9wsWU2C3KC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d770c9d9327cfef8e7690b22ecc896c_JaffaCakes118
Files
-
5d770c9d9327cfef8e7690b22ecc896c_JaffaCakes118.exe windows:5 windows x86 arch:x86
29a3e40f74da2abdc6832f0378b9196a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
ws2_32
WSAStartup
iphlpapi
GetIpAddrTable
user32
DestroyWindow
advapi32
CopySid
shell32
CommandLineToArgvW
oleaut32
SystemTimeToVariantTime
Sections
.MPRESS1 Size: 130KB - Virtual size: 504KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE