Static task
static1
Behavioral task
behavioral1
Sample
6c493c469588120ae74f97bb4fe48a9b_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
6c493c469588120ae74f97bb4fe48a9b_JaffaCakes118
-
Size
57KB
-
MD5
6c493c469588120ae74f97bb4fe48a9b
-
SHA1
d94ac35611767ea98408960397368d085547d641
-
SHA256
c4e67123b8d1ddfe954c342427d57068f757b0d0f3dc95e12c6eb52203991e5e
-
SHA512
24b1c6697452bc6a654a99ab3db87cac2684780e19b6e2f8aa2fa2038cd185bca6a5db86fd32baf457446056e6014692b62d11280c0a018f743f37fb9a51abc9
-
SSDEEP
1536:JS4V5/NA8eN2ARnS2vTMRa9Aqh/ihjAz6U:JSBtk2vTMKAqh/sjo5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6c493c469588120ae74f97bb4fe48a9b_JaffaCakes118
Files
-
6c493c469588120ae74f97bb4fe48a9b_JaffaCakes118.exe windows:5 windows x86 arch:x86
8d4f21bf7ae699edcfd4468e0f3980f3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
RegCloseKey
shell32
SHFileOperationW
wininet
InternetOpenW
Sections
.MPRESS1 Size: 51KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE