Static task
static1
Behavioral task
behavioral1
Sample
ad536b2e652291441f6fb0d3be4040a4_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ad536b2e652291441f6fb0d3be4040a4_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
ad536b2e652291441f6fb0d3be4040a4_JaffaCakes118
-
Size
203KB
-
MD5
ad536b2e652291441f6fb0d3be4040a4
-
SHA1
ee5c33cc687f815dc28ab02f2d5d253ec7621620
-
SHA256
112eabe7e5596096c5da9863d4defc3c06675702840acfcc46a92c3e4899246d
-
SHA512
7903bb4aba0f87f8f472c0aac93080e700e24d9e552778f57696a71d63775b82c07f8b7a04df739699c97bc763476df5820b0b263f4d4f07f40490e082310509
-
SSDEEP
3072:hpp7KawRzWzSifHYw8iwYlno6M6gT3jahW5mwws:XBvwRzWzew3BlnoV3T3jahWow
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad536b2e652291441f6fb0d3be4040a4_JaffaCakes118
Files
-
ad536b2e652291441f6fb0d3be4040a4_JaffaCakes118.exe windows:6 windows x86 arch:x86
02d13efda4ccb17c1328582577feed3c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
EndPaint
advapi32
RegCloseKey
shell32
SHGetMalloc
Sections
.MPRESS1 Size: 109KB - Virtual size: 472KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE