Static task
static1
Behavioral task
behavioral1
Sample
8e78104cee1d372c075db6a23bc4483c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8e78104cee1d372c075db6a23bc4483c_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
8e78104cee1d372c075db6a23bc4483c_JaffaCakes118
-
Size
10KB
-
MD5
8e78104cee1d372c075db6a23bc4483c
-
SHA1
ed788c502664d13daed73f62ee2f95b3f7e9afae
-
SHA256
0229e99e31924d1cf736355f3421ddb62da249e3c51edb0c5ee5d6d18ea12770
-
SHA512
c9376a8383cd2663f319e01c5325c1f3924946d966be043487c58ba2b6f9cbf8de67e984376a69c7513fda82882acd8fa426eb4444f7df991643991fc3f2a80b
-
SSDEEP
192:yf5zbiOR6Q9FOrxwUyd/doy0nnYpG+WqqowJW:yfhi66Q9FO1eLo/YpXWqxwJW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e78104cee1d372c075db6a23bc4483c_JaffaCakes118
Files
-
8e78104cee1d372c075db6a23bc4483c_JaffaCakes118.exe windows:5 windows x86 arch:x86
a05a9ba2605a6eb25c1ccfad370f4810
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
free
advapi32
CopySid
gdi32
GetStockObject
user32
MessageBoxW
ole32
CoInitializeEx
rsconn
_HsmConnectFromName@16
rscommon
g_WsbLogLevel
Sections
.MPRESS1 Size: 6KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE