Static task
static1
Behavioral task
behavioral1
Sample
b422230f59dca2960fc2228625007364_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b422230f59dca2960fc2228625007364_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
b422230f59dca2960fc2228625007364_JaffaCakes118
-
Size
43KB
-
MD5
b422230f59dca2960fc2228625007364
-
SHA1
5a9c6ef36e92b3c7ba218a47b198e0da47b18548
-
SHA256
07f944ff825291861bbea50ef9687d7d745aae6b0524444abe693163e0c39116
-
SHA512
b4dd0d85ecaa670a1eccf09acd6362b203520f23c1f50c8bc472e71d54e565ccae215c8391012200804744eae59b8ce7b5766f76cc782c4d84bbf4caf4585143
-
SSDEEP
768:eHOs3Gly0Pq89xti8Wl6ru3hBArBXKYaT1Fu2hnx9b4QcJdWJPS37DoNtz:eu012xoFl6uz1Fu2hn2qSmz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b422230f59dca2960fc2228625007364_JaffaCakes118
Files
-
b422230f59dca2960fc2228625007364_JaffaCakes118.exe windows:6 windows x86 arch:x86
962fabc13b137a1033271e66f7d459f2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
AddAce
user32
CharPrevA
msvcrt
free
ole32
CoCreateGuid
oleaut32
SysFreeString
wininet
InternetOpenW
wsock32
WSAAsyncSelect
Sections
.MPRESS1 Size: 36KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE