Static task
static1
Behavioral task
behavioral1
Sample
cef367cfd4bd58ec1d534c244638d339_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cef367cfd4bd58ec1d534c244638d339_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cef367cfd4bd58ec1d534c244638d339_JaffaCakes118
-
Size
47KB
-
MD5
cef367cfd4bd58ec1d534c244638d339
-
SHA1
e4e9d52e9882f6907a6acb9541d3d5d730f73aa5
-
SHA256
40edc7d2c43eee23274cd4a52fe22c7206c1ec9bba9b2edfcaa1de9453b13d2d
-
SHA512
5aabbfac24aa900a7f6a9ae526098b66c793b799b1e3d4fc9b881b894a809647851c4f3878072a5ff1534dc559233451593811e162ba957ff378d45e1d4591fb
-
SSDEEP
768:hWf5pMNKfvRLTee8a+CtHeGh0bvA5JUEl6i27PZM4R5txNYRrKK6RZXb:haaKHRLT6T6eGFJUEM2o8RrKK63Xb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cef367cfd4bd58ec1d534c244638d339_JaffaCakes118
Files
-
cef367cfd4bd58ec1d534c244638d339_JaffaCakes118.exe windows:5 windows x86 arch:x86
1bcb7ddac444d73a55897bdab733c3c0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
comdlg32
FindTextW
shell32
DragFinish
winspool.drv
ClosePrinter
comctl32
CreateStatusWindowW
msvcrt
time
advapi32
RegCloseKey
gdi32
EndDoc
user32
GetDC
Sections
.MPRESS1 Size: 16KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE