Static task
static1
Behavioral task
behavioral1
Sample
7907501c1c9d7bdea54386d1282d8ace_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
7907501c1c9d7bdea54386d1282d8ace_JaffaCakes118
-
Size
257KB
-
MD5
7907501c1c9d7bdea54386d1282d8ace
-
SHA1
ec8e8176bd11bf3a8130c0526e69ba4c7ef1afd2
-
SHA256
530ff9235c607a91f19ae716e91c638a4782c3ee4120f34db0e39f78ee52d6f5
-
SHA512
c5f284b771a9db4d05ca24271b477e5d993e916fce27d38426b27e650967c8a848d1929b2401c8d3fef952301f096d4abc6f545cf303765d8cb32b36a1eb630e
-
SSDEEP
6144:0g/mmLF/rAzlPK+o720fRERai3uzm3RRDedd6jtfsG:0g/mkCzly+J05Cb+i3Rpxjtfs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7907501c1c9d7bdea54386d1282d8ace_JaffaCakes118
Files
-
7907501c1c9d7bdea54386d1282d8ace_JaffaCakes118.exe windows:4 windows x86 arch:x86
22423eb3058af0ae47f08ce450d03f43
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
CharNextA
advapi32
RegCloseKey
oleaut32
SysFreeString
Sections
.MPRESS1 Size: 251KB - Virtual size: 304KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE