Static task
static1
Behavioral task
behavioral1
Sample
c8f4b5fce253faa23ee7e7068f92915b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c8f4b5fce253faa23ee7e7068f92915b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c8f4b5fce253faa23ee7e7068f92915b_JaffaCakes118
-
Size
227KB
-
MD5
c8f4b5fce253faa23ee7e7068f92915b
-
SHA1
8d3174a6235a47b60279aa16655066cae537ce4b
-
SHA256
5d58efb628243104f5d470428f5b89292bd1e3daf8a762fc033c4f0730e080a1
-
SHA512
e7393c5e5f11ad0c8ad681689453036422a1ae42f9a005654e0d9dd403e66571eda3dd96a237b343dafd6aa185df487dfa049118e31277786f67741a683da84a
-
SSDEEP
6144:7akwIoQNj0uWvw2OkD54EL7XDg/llcIAtMrlk:1zWdOSnDg/llcT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8f4b5fce253faa23ee7e7068f92915b_JaffaCakes118
Files
-
c8f4b5fce253faa23ee7e7068f92915b_JaffaCakes118.exe windows:5 windows x86 arch:x86
db534f3a7a8672023d2710cd7464c872
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
psapi
GetMappedFileNameW
imagehlp
CheckSumMappedFile
user32
GetDC
gdi32
PatBlt
comdlg32
GetSaveFileNameW
advapi32
RegCloseKey
shell32
ShellExecuteW
ole32
CoInitialize
oleaut32
VarUI4FromStr
shlwapi
PathAppendW
comctl32
ImageList_Create
Sections
.MPRESS1 Size: 200KB - Virtual size: 448KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE