Static task
static1
Behavioral task
behavioral1
Sample
b6a2c5d05c2dfe1444ef7b72fad2f9fa_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b6a2c5d05c2dfe1444ef7b72fad2f9fa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b6a2c5d05c2dfe1444ef7b72fad2f9fa_JaffaCakes118
-
Size
18KB
-
MD5
b6a2c5d05c2dfe1444ef7b72fad2f9fa
-
SHA1
832f8ecea80198cd3169722f3529557026a21485
-
SHA256
b53856e0f14f704e43f72cba5e2726f624ac0efc0aa73fda4fadee2067290b20
-
SHA512
93715c64762aaf433a99c79a02f8a4a348a2391dbdb10f80d09b1357f5baf28ecd0c4d9344f80376c02c8bac36a4da05ef575423ce94232fee44d5a2397e4de6
-
SSDEEP
192:J79Cv0ralaybQdBtbrG0qo43OlAqt4+OD1Xxuh1B7N1idB/5iipc0/0:J79StGyo43OuI4rxButiH5Npzs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6a2c5d05c2dfe1444ef7b72fad2f9fa_JaffaCakes118
Files
-
b6a2c5d05c2dfe1444ef7b72fad2f9fa_JaffaCakes118.exe windows:5 windows x86 arch:x86
351cc07e6517a5f8579259e0495feaf2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetProcessHeap
VirtualAlloc
RtlUnwind
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
user32
MessageBoxA
advapi32
RegOpenKeyExA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 586B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 908B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ