Static task
static1
Behavioral task
behavioral1
Sample
1b8fe9b6bf1e3062de96757ea045606e_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1b8fe9b6bf1e3062de96757ea045606e_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1b8fe9b6bf1e3062de96757ea045606e_JaffaCakes118
-
Size
238KB
-
MD5
1b8fe9b6bf1e3062de96757ea045606e
-
SHA1
37b4b5b10bc4e7c341de68145caa663b3b020f26
-
SHA256
1afb3c36f715972fff0e41331bd37c526a1c020bd5f9a31e20842769afa2b5bf
-
SHA512
eb4b24e77f6853c8e6987bf0771dfdbc503254daadf803472f7bfd7ef211d5d4f91d622c0c92ea641b12489caed8bc9d8303f1c81812cae902ba81b554b0965e
-
SSDEEP
6144:bXL/yDAFK1LNPRzfi9inEJknyQy2Xii0nYkDRT:bX2bjd/7y2Si0nYyt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b8fe9b6bf1e3062de96757ea045606e_JaffaCakes118
Files
-
1b8fe9b6bf1e3062de96757ea045606e_JaffaCakes118.exe windows:4 windows x86 arch:x86
11400dc26cd6fb71ae9152d66dc4e1c0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
CharNextA
advapi32
RegCloseKey
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
SaveDC
comctl32
ImageList_Add
Sections
.MPRESS1 Size: 163KB - Virtual size: 496KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE