Static task
static1
Behavioral task
behavioral1
Sample
878510906f815f06613b394905f3adf1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
878510906f815f06613b394905f3adf1_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
878510906f815f06613b394905f3adf1_JaffaCakes118
-
Size
42KB
-
MD5
878510906f815f06613b394905f3adf1
-
SHA1
8adc46e457568df17f857b938ec5176455dc021c
-
SHA256
3d3eb2f0050608e7e083564faf45bd9f78c13d1e66b660c6e21b4957076eec89
-
SHA512
d2e55b4da8bf199f813cced332a5f167a95aad63dcf549eb0e2a79915241c21614992cb2db81cb431415de1fda1957b61a27b914830535c1c744bc726a7e5864
-
SSDEEP
768:w3VIkc4pBE2thJ2KGTRpbcjGz3VPuijXPIaVrcIjfB4vT7D:CIIBltCKO7a8AcJf6v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 878510906f815f06613b394905f3adf1_JaffaCakes118
Files
-
878510906f815f06613b394905f3adf1_JaffaCakes118.exe windows:6 windows x86 arch:x86
3156fb38374a9470cc2c239d8ebccec3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
wsprintfA
advapi32
GetAce
Sections
.MPRESS1 Size: 38KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE