Static task
static1
Behavioral task
behavioral1
Sample
b851fb79ceb2a54b65b80aca5aadd2eb_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b851fb79ceb2a54b65b80aca5aadd2eb_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
b851fb79ceb2a54b65b80aca5aadd2eb_JaffaCakes118
-
Size
588KB
-
MD5
b851fb79ceb2a54b65b80aca5aadd2eb
-
SHA1
e9f13e83650304af3182cf7d1e763a0fb3471e09
-
SHA256
9810fda74281130f8e30a8a22dbf029ad058168be8dc67d2076c18e851dfa52d
-
SHA512
4509e6facf79c82fba19c1c0d60f2f0a15506870851f57ca3fc955dac0721cfbd3f804f8201a71c382a5ae063e4adb01034f3d378faa23c24255b7923c0cddb2
-
SSDEEP
12288:UQKxlulD7Kp/vG1hEpDfYPn9wSq1YCJ/gUtfvyG1AjB:bsaD21MqSG5J/gUFvhA1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b851fb79ceb2a54b65b80aca5aadd2eb_JaffaCakes118
Files
-
b851fb79ceb2a54b65b80aca5aadd2eb_JaffaCakes118.exe windows:5 windows x86 arch:x86
595061c541a06f52736591c3f5078a82
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
version
VerQueryValueW
comctl32
ord17
user32
GetDC
gdi32
SaveDC
advapi32
FreeSid
shell32
ord165
ole32
CoInitialize
oleaut32
VariantInit
shlwapi
PathFileExistsW
gdiplus
GdipFree
ws2_32
send
winhttp
WinHttpOpen
iphlpapi
GetAdaptersAddresses
dbghelp
MiniDumpWriteDump
Sections
.MPRESS1 Size: 376KB - Virtual size: 984KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 207KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE