Static task
static1
Behavioral task
behavioral1
Sample
7e5869a6297f6700f0be716b600d50c1_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
7e5869a6297f6700f0be716b600d50c1_JaffaCakes118
-
Size
14KB
-
MD5
7e5869a6297f6700f0be716b600d50c1
-
SHA1
e197a8fa71cf55824ae2aee407120d08cbdae20a
-
SHA256
a55cb917410aa698cc4711e5ef6cd67a63ec7bcc085cfa3eb8e922c2610d394c
-
SHA512
f0839a25997599587b7dd021104d42439e5556775acd5da2b8c40c2d7e1ac229b22c12a3d4ae6496102f681e7135c39e0d0c530fe3e1eeea6c22a1270a8019f2
-
SSDEEP
384:WDeMjK1QspGjcC8Cphee4Lu9pWjYpkWScmW:WDUispwG+hejuTWj8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7e5869a6297f6700f0be716b600d50c1_JaffaCakes118
Files
-
7e5869a6297f6700f0be716b600d50c1_JaffaCakes118.exe windows:10 windows x86 arch:x86
dfd9f03d83a073ed36af306587d32911
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
time
ntdll
RtlIpv4AddressToStringW
ws2_32
gethostbyname
api-ms-win-core-heap-l1-1-0
HeapSetInformation
api-ms-win-core-heap-l2-1-0
LocalFree
api-ms-win-core-synch-l1-2-0
Sleep
api-ms-win-core-errorhandling-l1-1-0
GetLastError
api-ms-win-core-processthreads-l1-1-0
TerminateProcess
api-ms-win-core-libraryloader-l1-2-0
LoadLibraryExA
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-sysinfo-l1-1-0
GetTickCount
snmpapi
SnmpUtilOidCpy
api-ms-win-security-base-l1-1-0
FreeSid
iphlpapi
GetIpStatisticsEx
api-ms-win-core-console-l1-1-0
GetConsoleOutputCP
api-ms-win-core-localization-l1-2-0
FormatMessageW
api-ms-win-core-string-l1-1-0
WideCharToMultiByte
Sections
.MPRESS1 Size: 9KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE