Static task
static1
Behavioral task
behavioral1
Sample
b0b766c569e37a74550ff824c300b2c7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b0b766c569e37a74550ff824c300b2c7_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
b0b766c569e37a74550ff824c300b2c7_JaffaCakes118
-
Size
183KB
-
MD5
b0b766c569e37a74550ff824c300b2c7
-
SHA1
cc45c3dbdf5b955b2f8e0a5eef9ccede2227aaf8
-
SHA256
fa7f3de64fb90c939bf26314282d70ce72d6c7ecf76864ff2c6105289e804e48
-
SHA512
460f153c810ae08a509af718c2eead335439f6a5d679d0ed8bdfd92ea02b26c190d989c14032cecf0e0e886f9aa84528f064e407d4f55cf18f40032b4ed015bf
-
SSDEEP
3072:GYqTMd+Z6Ay40mrvG1CM8HwKMlD46NUwdmOoXq4vW9mtdagCHq47/U2pZlN9iAfd:GYqQd7Aa1/8Hwzl1o+gZ2pZEbO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0b766c569e37a74550ff824c300b2c7_JaffaCakes118
Files
-
b0b766c569e37a74550ff824c300b2c7_JaffaCakes118.exe windows:5 windows x86 arch:x86
26782a83ed3f165803c097c1db053ae3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
RegCloseKey
user32
IsWindow
oleaut32
VariantClear
gdi32
DeleteDC
shell32
ShellExecuteExW
ole32
CoInitialize
cabinet
ord20
crypt32
CryptHashPublicKeyInfo
msi
ord141
rpcrt4
UuidCreate
wininet
InternetOpenW
wintrust
WinVerifyTrust
version
VerQueryValueW
shlwapi
PathCanonicalizeW
Sections
.MPRESS1 Size: 156KB - Virtual size: 492KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE