Static task
static1
Behavioral task
behavioral1
Sample
b87c7130545624b7d8e37a1586767b60_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
b87c7130545624b7d8e37a1586767b60_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
b87c7130545624b7d8e37a1586767b60_JaffaCakes118
-
Size
33KB
-
MD5
b87c7130545624b7d8e37a1586767b60
-
SHA1
3abd612b12ce1a8c738b8641447f6df4ce9f1c75
-
SHA256
fef6674695808659ca2090e0921155d0e9c703eab45e766a26c3c68894fad211
-
SHA512
6afd0ad5863e5280a82fb5111788fcbb3a18477c39bc3b550a21db8dbc9aca253f886e3662d75c275ab39d4d855c2331dd1f8ca09ee319b9d3a75120fa76cf5e
-
SSDEEP
768:ULf0dumxrRlS6hsoMX556gJ1IaZKXPJCncM7D:ULeumv86XMX556glofJp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b87c7130545624b7d8e37a1586767b60_JaffaCakes118
Files
-
b87c7130545624b7d8e37a1586767b60_JaffaCakes118.exe windows:4 windows x86 arch:x86
e572f0fe0101a1edb3a3e75eb39ee0ee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
SetTimer
gdi32
PatBlt
advapi32
RegOpenKeyExA
shell32
ShellExecuteA
comctl32
ord17
Sections
.MPRESS1 Size: 27KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE