Static task
static1
Behavioral task
behavioral1
Sample
c17adf15bf5684533e413698912d83ed_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c17adf15bf5684533e413698912d83ed_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c17adf15bf5684533e413698912d83ed_JaffaCakes118
-
Size
26KB
-
MD5
c17adf15bf5684533e413698912d83ed
-
SHA1
4f632b974c964e9ecadcd3586bf6f8fa134f6377
-
SHA256
f73d11aba3b5270c382caa81c13d0ec0bf1c686d373a63e9b70269c20c3d604f
-
SHA512
20d2bf7225ec73af1496f759b2c95a7d1b1cc8787c1af85ebeed6398015cce889f285cde16d72802bec3f8f416b1426e9198a402e7fd5bef752425880134878d
-
SSDEEP
768:TGH7wa9+ruvafMkC2V6oPU3uLlxFJncPUP7DJ:Tyw57kkFHNv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c17adf15bf5684533e413698912d83ed_JaffaCakes118
Files
-
c17adf15bf5684533e413698912d83ed_JaffaCakes118.exe windows:6 windows x86 arch:x86
fe5f316c9dc016cdb5c0f2f8dbde5540
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
exit
ws2_32
WSACleanup
ole32
CoUninitialize
wevtapi
EvtNext
advapi32
FreeSid
oleaut32
SysAllocString
Sections
.MPRESS1 Size: 19KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE