Static task
static1
Behavioral task
behavioral1
Sample
b6b44495ee0dfe5fd9445b91e0c75d2b_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
b6b44495ee0dfe5fd9445b91e0c75d2b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
b6b44495ee0dfe5fd9445b91e0c75d2b_JaffaCakes118
-
Size
75KB
-
MD5
b6b44495ee0dfe5fd9445b91e0c75d2b
-
SHA1
f2a85e04b4ba73b9510259427ea1e5d9d0ca18dd
-
SHA256
1af1d30b73bbc2115ce59f11cad50fb5598668f2dc1741b052e965212b33a536
-
SHA512
cd3297b8a49ccd9639e8e90d74f11f1787b802620186db389a183aa2611fc0fd836a7c27372be124fb9b14ef392ceda72f13f1b0774189147b0637c13fe20c53
-
SSDEEP
1536:ShTVFvZ6ewUDpGOzDl/AexUQ+3fGTZgL2EI0ugVFiTh/fjo:StV5jtFPz5/XmQYgOLKpgVFYc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6b44495ee0dfe5fd9445b91e0c75d2b_JaffaCakes118
Files
-
b6b44495ee0dfe5fd9445b91e0c75d2b_JaffaCakes118.exe windows:4 windows x86 arch:x86
60b02ec32102ec2501907e0d4b1db8c5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
setupapi
SetupDiGetINFClassW
advapi32
RegCloseKey
version
VerQueryValueW
Sections
.MPRESS1 Size: 69KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE