Static task
static1
Behavioral task
behavioral1
Sample
a033994e40a2c03dd9763f1a327e1d2e_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a033994e40a2c03dd9763f1a327e1d2e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
a033994e40a2c03dd9763f1a327e1d2e_JaffaCakes118
-
Size
34KB
-
MD5
a033994e40a2c03dd9763f1a327e1d2e
-
SHA1
0ccc3cc629928cc4538b34c31626d2e960f5ba41
-
SHA256
6d23df4805cba785e36658e6438b715fcb64eadb4c95f54eed481217f9e25c06
-
SHA512
f3673f2c8821969f936fcfee9882ddbb64cf95c5969f3171cc5f5773cc7b08b3d4a28e42931af9dde21d3895a95db1b19b2537e8f9a1e05fa11a1c8e8e88fc15
-
SSDEEP
768:4ROIsiajENZtJRkTPUBfMVTP5Qjx6DTemsvh7DFdvgnYrr+jqedw2:oOPjEzRjBEVSj8TemINgnMSqedZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a033994e40a2c03dd9763f1a327e1d2e_JaffaCakes118
Files
-
a033994e40a2c03dd9763f1a327e1d2e_JaffaCakes118.exe windows:4 windows x86 arch:x86
1f72aa52e34ac8ee1b5b2a4b9030b57a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
imagehlp
MapAndLoad
shlwapi
StrChrW
comctl32
InitCommonControlsEx
user32
CharNextA
shell32
SHFileOperationA
Sections
.MPRESS1 Size: 22KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE