Static task
static1
Behavioral task
behavioral1
Sample
bf15329258f2f9389798ed3952b7be19_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bf15329258f2f9389798ed3952b7be19_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bf15329258f2f9389798ed3952b7be19_JaffaCakes118
-
Size
53KB
-
MD5
bf15329258f2f9389798ed3952b7be19
-
SHA1
65d8af0c0bef13dfb35f804b779b68707f0810b1
-
SHA256
61c2e5c6903454021e0f4adac31e1d15fcb33f12cf58cfa3204fc694e0887706
-
SHA512
43a542ac0c8a5f64c608f03d00e5b037b10bb759ba610847eeeb7ba6f5774ac6f465df53859715aded55754a8ca4a9a12f4c5c92f3c481fdd55ca31fd0eebbc1
-
SSDEEP
768:MITqCdR6M6JRmb6lc7uxHGvGVMEO7DP8AJ6/t3Zdbd2i1HgFjxCLZJwrin19Y:MIdRGRmb6W78AGVviHaHm8eaZJwri1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf15329258f2f9389798ed3952b7be19_JaffaCakes118
Files
-
bf15329258f2f9389798ed3952b7be19_JaffaCakes118.exe windows:5 windows x86 arch:x86
2833dc8c22a16d2f0da0434c77ecae07
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
shell32
CommandLineToArgvW
Sections
.MPRESS1 Size: 21KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE