Static task
static1
Behavioral task
behavioral1
Sample
0f38f375c1c9b5e70064f85bc5730f40_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0f38f375c1c9b5e70064f85bc5730f40_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0f38f375c1c9b5e70064f85bc5730f40_JaffaCakes118
-
Size
890KB
-
MD5
0f38f375c1c9b5e70064f85bc5730f40
-
SHA1
58cefe3fa21b6a1f5b0125ebd26b26cd90910b3e
-
SHA256
f756b31e4516cb9c461337475196a9e7e25a3cb939d7dde1553836eab90dc238
-
SHA512
2be88b4a1b5fcbf1e79ffdee022d6f810009038ade457d27817c9b0105730c41c67065fd4351b89cfe36064d2c2d31f2e9373286206c4f930beb2dbe3c131b6d
-
SSDEEP
24576:K7uoLQpxg87Dd5AKnDAxuAo9Dnmeuj2q71T/1UbqodHT59nDxSP/fI1xWt8:K7uoLQ3gWxvdTkrp/1Yq4PMnfI1xWt8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f38f375c1c9b5e70064f85bc5730f40_JaffaCakes118
Files
-
0f38f375c1c9b5e70064f85bc5730f40_JaffaCakes118.exe windows:5 windows x86 arch:x86
6469777494a035509d6b5a45d8a22018
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
user32
ShowWindow
mprapi
MprAdminUserWrite
mapi32
MAPILogonEx
msvcrt
malloc
iphlpapi
GetAdaptersInfo
psapi
GetMappedFileNameW
advapi32
RegOpenKeyExA
Sections
.text Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 871KB - Virtual size: 872KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ