Static task
static1
Behavioral task
behavioral1
Sample
b11a5640da055c697478370debcb70d0_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
b11a5640da055c697478370debcb70d0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
b11a5640da055c697478370debcb70d0_JaffaCakes118
-
Size
36KB
-
MD5
b11a5640da055c697478370debcb70d0
-
SHA1
03081a7ca2b41c9c68ad5c5330ad220ca3552a99
-
SHA256
9d03db3d61e14888a1cf2fd25b8311f1367ddad1132d268b5fac40391a03a004
-
SHA512
c8c5e440d1dd9abb160b3ac7e99d98f80a5de7671c95e1d77b4416c53d480515a2f86eb768a1d5ed02d21279df13e614353c76d60bb1172e350cc7b5bea5b410
-
SSDEEP
768:nvEid9rNZ5iD9BgGS3i2el7aH5AgsYuO8gEgKBkK37DyDD:8ib5iD9BT25PKgsYubNgKCKCDD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b11a5640da055c697478370debcb70d0_JaffaCakes118
Files
-
b11a5640da055c697478370debcb70d0_JaffaCakes118.exe windows:6 windows x86 arch:x86
a94cf74454b3e43e1d598a3b267015b9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
RegCloseKey
msvcrt
getc
wsock32
ord1108
ws2_32
getaddrinfo
user32
CharToOemBuffA
dnsapi
DnsQueryConfigAllocEx
ntdll
NtOpenKey
Sections
.MPRESS1 Size: 28KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE