Static task
static1
Behavioral task
behavioral1
Sample
a4c607bf8123c15cbf950c54559eaa54_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a4c607bf8123c15cbf950c54559eaa54_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
a4c607bf8123c15cbf950c54559eaa54_JaffaCakes118
-
Size
22KB
-
MD5
a4c607bf8123c15cbf950c54559eaa54
-
SHA1
6429c133c4b130677208b77f07e02c6ea88ec2cf
-
SHA256
5c1356bb9ba18251047c1338c6bf078996fc27d07950e6f6716727928f950f6e
-
SHA512
6276f6190dcc916f73a230e45fd88a17b67bc098e2d16be9dfb7752905401d53584df7fec60112221ce2232efc33164a270df9d8dd73b3125c18027c0f2c4e4c
-
SSDEEP
384:pg2WuIFt5Ob9wpaN915wfnO/Z9aBLf933YtQN2EIwhMyUX2JN7vvxlLpW5CoQWW:S2qFfOb68/3wvgs9Cw2EIgjrN7DTo4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a4c607bf8123c15cbf950c54559eaa54_JaffaCakes118
Files
-
a4c607bf8123c15cbf950c54559eaa54_JaffaCakes118.exe windows:6 windows x86 arch:x86
045a3faf702aece185ca59040fe86a95
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
CopySid
msvcrt
exit
user32
CharUpperW
secur32
GetUserNameExW
ws2_32
WSACleanup
shlwapi
StrChrW
version
VerQueryValueW
Sections
.MPRESS1 Size: 16KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE