Static task
static1
Behavioral task
behavioral1
Sample
783408899f5a403fa4b9a75992aab943_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
783408899f5a403fa4b9a75992aab943_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
783408899f5a403fa4b9a75992aab943_JaffaCakes118
-
Size
22KB
-
MD5
783408899f5a403fa4b9a75992aab943
-
SHA1
65ef77882af7ef0554b850389b3001e2d8e1d532
-
SHA256
44af9a7ca49558ae631867c16e410af171ccb0f06512cb73467b347bfab740e3
-
SHA512
0384e0fc0b296d581891555bdb414a0a4761f5095b356eedf3719acbe44b4a403d7bd5e092a6117ba1b2b1282d14569d6aacd4a2fa89f74983d8354fe94ecebe
-
SSDEEP
384:6qOjFSOOc7LfOaYuZGPoQmN9ZJW37fs4dDJ8S5Pihd6/v2x8fSb7vvxlLdmWyIo:BOTzODuAKxJ+7fpJOhAv28c7DcI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 783408899f5a403fa4b9a75992aab943_JaffaCakes118
Files
-
783408899f5a403fa4b9a75992aab943_JaffaCakes118.exe windows:5 windows x86 arch:x86
f02e13aaa4e6b6b1ede9d62ba445a237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt20
exit
user32
SetFocus
shell32
ShellExecuteExA
comctl32
ord17
wintrust
WinVerifyTrust
wininet
FtpOpenFileA
cmpbk32
PhoneBookLoad
Sections
.MPRESS1 Size: 16KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE