Static task
static1
Behavioral task
behavioral1
Sample
644a4a34b52e71e284e0debc01d33c1a_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
644a4a34b52e71e284e0debc01d33c1a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
644a4a34b52e71e284e0debc01d33c1a_JaffaCakes118
-
Size
124KB
-
MD5
644a4a34b52e71e284e0debc01d33c1a
-
SHA1
69429f051e97095b72e48f9eb4dfaf7a0097a2a3
-
SHA256
fe549fdb6bfc0722b9588eadae25a69b1e46e9fa89fbd2cbd4867bc60feb7bfa
-
SHA512
c604c740d2fddf5f280fd2fe919a049175c3352bb2c1f24f40afb2f8f6a68c15a380bc2dd8d3aa1201062a4c7af013ecc9688827412a12f1e6fff80a5e21f01a
-
SSDEEP
1536:D1P/7IMFCQ+nfOX4og5TbKqVFHD0Zmx9YJcgii5OQLi+MzPDXnInAKnvqVp/:ZnUMFCQ+fOoTfFH4/cgtLErCU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 644a4a34b52e71e284e0debc01d33c1a_JaffaCakes118
Files
-
644a4a34b52e71e284e0debc01d33c1a_JaffaCakes118.exe windows:4 windows x86 arch:x86
7be5c5c99ea477624b1571421d99f50b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
version
VerQueryValueA
user32
LoadIconA
gdi32
GetStockObject
advapi32
RegCloseKey
shell32
ShellExecuteA
Sections
.MPRESS1 Size: 92KB - Virtual size: 416KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE