Static task
static1
Behavioral task
behavioral1
Sample
6adfa8716491a4e085c2b928860c2e2e_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6adfa8716491a4e085c2b928860c2e2e_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
6adfa8716491a4e085c2b928860c2e2e_JaffaCakes118
-
Size
37KB
-
MD5
6adfa8716491a4e085c2b928860c2e2e
-
SHA1
9b049d1a7c8b1e05b4ed4990b4600e5cf07c7843
-
SHA256
0eb347a67def4ff261f1cb55eb2de7e88ad13631a4d5b148264a1b9b592cd23f
-
SHA512
c421ec67eccbfb6ab455f33fd88b401f9c2e313f76c6c30d9836e28d06fd96584d9070aed0d5ea7728e01551eaf2dbcb17c890ced4a05977c128b84ace5a32c5
-
SSDEEP
768:MoR5tGa/+iZWOUdm2bVh+qmSo17BgoJi276g7DkKo2WS:1JDWOUo2pVxonrYIo2WS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6adfa8716491a4e085c2b928860c2e2e_JaffaCakes118
Files
-
6adfa8716491a4e085c2b928860c2e2e_JaffaCakes118.exe windows:5 windows x86 arch:x86
e006f9ba0d3c208e4ca06660f3ec1653
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcr100
atoi
user32
wsprintfA
ole32
CoTaskMemFree
oleaut32
VariantClear
Sections
.MPRESS1 Size: 30KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE