Static task
static1
Behavioral task
behavioral1
Sample
b291aa6b361be8091be9ba5b6110cdc5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b291aa6b361be8091be9ba5b6110cdc5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b291aa6b361be8091be9ba5b6110cdc5_JaffaCakes118
-
Size
67KB
-
MD5
b291aa6b361be8091be9ba5b6110cdc5
-
SHA1
ba64ff0bf58a30847d39d4e8d05b1f2847389892
-
SHA256
67f633f022a4fe7c60669939204ad81fc5d384cbba48fecfc199783b92985666
-
SHA512
de5c966efb87d9a22e0bae967f1486bbdc656ce587b3c07543ace52f2a2752ba2c877d1fd392981d8f5a86ade0cb47fe186fb98287fa1c54c03aee8622101ddb
-
SSDEEP
768:VF4DtodTH79akqZFKZei/JC2KMXUd/Fy1j0i0BVPNDsHZXLN1:/ndTH740fxLKMXUdkIu5XLf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b291aa6b361be8091be9ba5b6110cdc5_JaffaCakes118
Files
-
b291aa6b361be8091be9ba5b6110cdc5_JaffaCakes118.exe windows:4 windows x86 arch:x86
a830a63beaf97feafcaf992120ec9f9b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ord843
ord864
ord284
ord855
ord827
ord846
ord409
ord312
ord360
ord654
ord205
ord842
ord160
ord766
ord841
ord758
ord280
ord415
ord365
ord849
ord377
ord443
ord858
ord512
ord441
ord722
ord329
ord551
ord550
ord447
ord444
ord553
ord793
ord509
ord513
ord822
ord795
ord511
ord560
ord565
ord798
ord397
ord395
ord784
ord476
ord419
ord248
ord765
ord346
ord657
ord318
ord406
ord304
ord594
ord362
ord305
ord364
ord811
user32
ord303
ord334
ord429
ord54
ord396
ord57
ord515
ord183
ord254
ord145
ord405
ord319
ord235
ord91
ord79
ord81
ord143
ord525
ord566
ord559
ord232
ord330
ord624
ord23
ord488
ord163
ord247
ord316
ord181
ord252
ord386
ord463
ord503
ord645
ord526
ord415
ord498
shell32
ord285
ord288
ord266
comctl32
ord5
ord17
winmm
ord142
facehelp
ord34
ord12
ord6
ord25
ord1
ord30
ord13
ord11
ord37
ord22
ord21
ord20
ord15
ord17
ord35
ord7
ord5
ord9
ord8
ord29
ord32
ord33
avcdrom
ord55
ord54
ord51
ord53
cdecoder
ord1
encmpa
ord11
ord5
ord9
ord8
ord7
ord6
ord4
ord3
ord2
ord1
gdi32
ord206
ord371
ord378
ord326
ord176
ord329
ord161
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 963B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE