Static task
static1
Behavioral task
behavioral1
Sample
b3bce48caf7097927aa051ff09aee52f_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b3bce48caf7097927aa051ff09aee52f_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
b3bce48caf7097927aa051ff09aee52f_JaffaCakes118
-
Size
22KB
-
MD5
b3bce48caf7097927aa051ff09aee52f
-
SHA1
9ceb1b306d93e9a19fad63952e6d1feb2afaf2f1
-
SHA256
2725888af3a08bfcb95de5ec335be9b4c856e8ef69d60422981f911e2c0d23a9
-
SHA512
82b548ec03bf3b9b3bc6ba61d4677694326447f357b02b5e532699a0f554ad8f156cb963905d205b4542e469b26cc4319f72aa03b84cf8d0f9c008de5003b16f
-
SSDEEP
384:wJfduVIkwTBx3QrWNBvrtiX0HwiigrvTfnZ2loWK7vvxlLbWO24W:wWWtlvvrtbwg/j7DQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3bce48caf7097927aa051ff09aee52f_JaffaCakes118
Files
-
b3bce48caf7097927aa051ff09aee52f_JaffaCakes118.exe windows:5 windows x86 arch:x86
88b3d68eb901fd85f183a8147db7fd2b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
atoi
dbgeng
DebugCreate
advapi32
RegCloseKey
Sections
.MPRESS1 Size: 16KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE