Static task
static1
Behavioral task
behavioral1
Sample
091ce5888ac0766310bc17b5feea4ef5_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
091ce5888ac0766310bc17b5feea4ef5_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
091ce5888ac0766310bc17b5feea4ef5_JaffaCakes118
-
Size
109KB
-
MD5
091ce5888ac0766310bc17b5feea4ef5
-
SHA1
3361647ea5055b3cc0f22bbdfe6f6110b559bdef
-
SHA256
a11a96b01c2b0db168e66ea66e52521af3da3d93de1ea121f1bb28e1cbf395ab
-
SHA512
52627d6d54a0dafc386c996f5a3b41a26ea61af2c1fa084567ef37d52439d1193e77108201b6ec8d94dfc6ae2145b3ec5348ef914e01270a4d2d1c86d4008080
-
SSDEEP
1536:+abm2KIYubvv8ObtomRtBgAxi/9/96O7nuqt8jJz:+6KI18Eto8XgAo9/96OaqtC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 091ce5888ac0766310bc17b5feea4ef5_JaffaCakes118
Files
-
091ce5888ac0766310bc17b5feea4ef5_JaffaCakes118.exe windows:5 windows x86 arch:x86
f9a8c335649353d947b206f5d7f25bda
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoW
GetStartupInfoA
ole32
CoTaskMemAlloc
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoInitialize
shlwapi
PathIsFileSpecW
SHStrDupW
comctl32
CreateStatusWindowW
PropertySheetW
CreatePropertySheetPageW
Sections
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 400B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA2 Size: 512B - Virtual size: 400B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA3 Size: 512B - Virtual size: 400B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 622B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ