Static task
static1
Behavioral task
behavioral1
Sample
637a34443d5aebf79a2183fea437293a_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
637a34443d5aebf79a2183fea437293a_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
637a34443d5aebf79a2183fea437293a_JaffaCakes118
-
Size
20KB
-
MD5
637a34443d5aebf79a2183fea437293a
-
SHA1
fc6b48ba9cc5f263c26f0f0ef0d131774c128db4
-
SHA256
7621d82d4380fc6f547d9f4678fa61cd1f6c6a5007e0385bc4b4a4620f97c696
-
SHA512
e5c438339dfd6ab6ca5c3655a4690ade4daaf70228da9960b8ebb8f2fbc785a6344fbd0cea5a955feb14df9197539b90d612ec6c4daef9119591abd237cc1d74
-
SSDEEP
384:YIohLC52cOu6GIjTUT3iA/+UGQl5yg80r8FBOdUKkZJeKlD7vvxlL7WSMxs9W:YIoZCG7GUZA2U9kBrrlD7D5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 637a34443d5aebf79a2183fea437293a_JaffaCakes118
Files
-
637a34443d5aebf79a2183fea437293a_JaffaCakes118.exe windows:5 windows x86 arch:x86
48c3652927ebc8fb85db9620a5e082cd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
exit
advapi32
RegCloseKey
ole32
CoUninitialize
oleaut32
VariantClear
user32
CharUpperW
activeds
ord13
secur32
GetUserNameExW
crypt32
CryptProtectData
Sections
.MPRESS1 Size: 14KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE