Static task
static1
Behavioral task
behavioral1
Sample
464f8f0d23a1fe2829dfb761656eb8da_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
464f8f0d23a1fe2829dfb761656eb8da_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
464f8f0d23a1fe2829dfb761656eb8da_JaffaCakes118
-
Size
47KB
-
MD5
464f8f0d23a1fe2829dfb761656eb8da
-
SHA1
18e240a2f5da529850ae80720d5c6cf6ff8da3f4
-
SHA256
2190e0bf0559099cb09205e6819f772303d38efc8635d034852a72e85bb5916b
-
SHA512
800298916a1c04fefe942b2288321acf20334fa354361e25898130ebf1896af18106c673f96f72d472e300305096c55729f7a21ab1c655c159e243dd3a3b9485
-
SSDEEP
768:FKOecO2eIuFhZG94PPqQOiVztJRpvVCHgkqdkPP/3oU1OF/ZezCL1BLlyg:XeW0hZG94XqRA5XErPXoUc/Zy21Bpyg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 464f8f0d23a1fe2829dfb761656eb8da_JaffaCakes118
Files
-
464f8f0d23a1fe2829dfb761656eb8da_JaffaCakes118.exe windows:4 windows x86 arch:x86
0300998850c7479deeab0832d8be1d0b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
MessageBoxA
advapi32
RegCloseKey
oleaut32
SysFreeString
winmm
timeGetTime
ntdll
NtUnmapViewOfSection
Sections
.MPRESS1 Size: 45KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1024B - Virtual size: 832B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE