Static task
static1
Behavioral task
behavioral1
Sample
be9f27ab64be865391f097104ef36828_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
be9f27ab64be865391f097104ef36828_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
be9f27ab64be865391f097104ef36828_JaffaCakes118
-
Size
131KB
-
MD5
be9f27ab64be865391f097104ef36828
-
SHA1
8f0ab4e3391ce60a777606cf242025ee418a23c1
-
SHA256
4450dc714c54cb8fe7febe91a1a9063c02c2dbaa5fc791f7cf1108bc20f0b083
-
SHA512
8a0005f6485626698d0db537120636ad929c8391bdf0c8d9b16fcec50dea6d0aef529cc0a92e42b4389ac15675e63d4c47632f50456499edcf167d355ef97d40
-
SSDEEP
3072:oeaUM6pKbj6TmPZ0hfqoSf6iSzV0Vh1dy2dn4iU/N:oGpKbcQW4aRtjt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be9f27ab64be865391f097104ef36828_JaffaCakes118
Files
-
be9f27ab64be865391f097104ef36828_JaffaCakes118.exe windows:4 windows x86 arch:x86
24379728c1bdc0fec57e44c179f33843
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
shlwapi
StrStrA
user32
GetDC
gdi32
BitBlt
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
OleInitialize
oleaut32
OleLoadPicture
comctl32
ImageList_LoadImageA
wininet
InternetOpenA
ws2_32
WSAStartup
version
VerQueryValueA
wpcap
pcap_close
Sections
.MPRESS1 Size: 110KB - Virtual size: 368KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE