Static task
static1
Behavioral task
behavioral1
Sample
a39947e01a48f06174d2e46912c3bf29_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a39947e01a48f06174d2e46912c3bf29_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
a39947e01a48f06174d2e46912c3bf29_JaffaCakes118
-
Size
177KB
-
MD5
a39947e01a48f06174d2e46912c3bf29
-
SHA1
854cbd4fe8ba0aae280bd476b3be77d3a2bffef8
-
SHA256
327cb97bad73db2ef4db72120a070b66d488d9211e4926118093096abe30ca2f
-
SHA512
2093b9e63c25c44860ce948b9aad3a1ea6f96855dca5dcabd29472e0cb405c2bbb6fc5dba2d0c22a53b4d50936c403182393bfb33f2682e3a70605ceefcb9650
-
SSDEEP
3072:ogyIIKq2I00q++usVvRLJECtGF08tl4BTnCQPiYXe39V:onfphgZJkcZy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a39947e01a48f06174d2e46912c3bf29_JaffaCakes118
Files
-
a39947e01a48f06174d2e46912c3bf29_JaffaCakes118.exe windows:5 windows x86 arch:x86
94127e28cbc5681ff6e39b8a68979187
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
wsprintfW
ntdll
LdrLoadDll
Sections
.MPRESS1 Size: 6KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1024B - Virtual size: 902B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 169KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE