Static task
static1
Behavioral task
behavioral1
Sample
67db3d53bb315dc8e5794a59368e26ba_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
67db3d53bb315dc8e5794a59368e26ba_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
67db3d53bb315dc8e5794a59368e26ba_JaffaCakes118
-
Size
34KB
-
MD5
67db3d53bb315dc8e5794a59368e26ba
-
SHA1
18225dbb7dc374c71eeeac03d272bc0c4f492fd4
-
SHA256
05ae66ffe1f1e9f0f6460e313ebc0483ace2463f5703b580b7d2d9cb93acb4f6
-
SHA512
deb35c1fc86839743e8e80cc90fd22978b64177fbe1927a27a49b6ca99a9c6c12a5114d535f9b814c9c632243f16bd0fdbdb0a0a1dcb7eb49af4ae5c82ed92e1
-
SSDEEP
768:kRa2PTIeiBCk9V+vvioVcKCGP+9Ljw7QwKkolKE7DMc21:deiBCoVoioWKCGPmwVKkoQBc21
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67db3d53bb315dc8e5794a59368e26ba_JaffaCakes118
Files
-
67db3d53bb315dc8e5794a59368e26ba_JaffaCakes118.exe windows:5 windows x86 arch:x86
e006f9ba0d3c208e4ca06660f3ec1653
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcr100
atoi
user32
wsprintfA
ole32
CoTaskMemFree
oleaut32
VariantClear
Sections
.MPRESS1 Size: 28KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE