Static task
static1
Behavioral task
behavioral1
Sample
6721d71b3abe074da2b538780c2be232_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6721d71b3abe074da2b538780c2be232_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
6721d71b3abe074da2b538780c2be232_JaffaCakes118
-
Size
83KB
-
MD5
6721d71b3abe074da2b538780c2be232
-
SHA1
884c38a9c3ba952ea125e889862ea6235dda599e
-
SHA256
57f006928afa097acafa9488010dcd73b30808d9514955572a7ce8761ebdf54c
-
SHA512
17e8e17f183ee75a6a5fcd404743dd4347cf0a798f318f95d567c9e4a6b3913aa4bdc9262a3f7480a8b2e7966583e849a53249ff18548ad0546a7ec1821a7150
-
SSDEEP
1536:WX0PkI6UDOJGqDaDYwIkC4md8UNSHgs65sJ7ed//29cuZ:hPkdUDyMDiQmd88SHU5sE4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6721d71b3abe074da2b538780c2be232_JaffaCakes118
Files
-
6721d71b3abe074da2b538780c2be232_JaffaCakes118.exe windows:5 windows x86 arch:x86
60dcedd56a41bd718cf0b06f6b84c0a9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
mfc90
ord1668
msvcr90
exit
user32
GetDC
gdi32
BitBlt
msimg32
AlphaBlend
shell32
ShellExecuteA
comctl32
_TrackMouseEvent
shlwapi
PathIsURLA
ole32
CoInitialize
oleaut32
SystemTimeToVariantTime
wsock32
WSAGetLastError
gdiplus
GdipFree
msvcp90
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
Sections
.MPRESS1 Size: 53KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE