Static task
static1
Behavioral task
behavioral1
Sample
a16230f7fc92d3fbbda9157795bfb0df_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a16230f7fc92d3fbbda9157795bfb0df_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
a16230f7fc92d3fbbda9157795bfb0df_JaffaCakes118
-
Size
61KB
-
MD5
a16230f7fc92d3fbbda9157795bfb0df
-
SHA1
d1adea670fa0b92c9a25b3e3cdd2f23a0a1fc8aa
-
SHA256
83ebcd498fe1694c399c75802f08e3e61579835e184fe425d4aa89c8231b1c43
-
SHA512
8441222c2d5f7b5a9c491df04e71339f8e18a89819425dadad9bb749a484b4e1184a4d2d4ff9773c91e458f35da9fd9e4c52efbcee3bb19c75e4d1fe7e9fb05d
-
SSDEEP
1536:Q3ZZ7agAh6+DEEa81a0haW9ErcRwDy9vY4:Q3vlAU8yoYW9Erwp9l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a16230f7fc92d3fbbda9157795bfb0df_JaffaCakes118
Files
-
a16230f7fc92d3fbbda9157795bfb0df_JaffaCakes118.exe windows:4 windows x86 arch:x86
d88cb0ed7c25870a76321d398c5cd88a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
RegCloseKey
user32
SetTimer
ole32
CoGetMalloc
oleaut32
LoadTypeLi
urlmon
CreateURLMoniker
imm32
ImmGetDefaultIMEWnd
version
VerQueryValueW
msvcrt
free
Sections
.MPRESS1 Size: 27KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE