Static task
static1
Behavioral task
behavioral1
Sample
cf76e5afaf45585efda737353e16f34a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cf76e5afaf45585efda737353e16f34a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cf76e5afaf45585efda737353e16f34a_JaffaCakes118
-
Size
134KB
-
MD5
cf76e5afaf45585efda737353e16f34a
-
SHA1
2fbd239a4c801a02b0e290b4aadcf7b57e94defd
-
SHA256
9ab44cbcfa866fac0318237696417bfd110383dbbf50724e52b24c19d1b982e8
-
SHA512
965f5684840091f8ce28578befb10012fc3aeb54f9c91d6f15f9860523594bc6a15e3b23c99819ed32c19383c25588c0cfb39e9626e8936084fc23d85bd5e991
-
SSDEEP
3072:tMQ9mwDVEpwtpK156AowvgiQkcA8na/HlhqdQ:nMwPK6nGNma/Hn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf76e5afaf45585efda737353e16f34a_JaffaCakes118
Files
-
cf76e5afaf45585efda737353e16f34a_JaffaCakes118.exe windows:6 windows x86 arch:x86
71e93379597f5eb606d6348911713130
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
iphlpapi
GetAdaptersInfo
ws2_32
bind
pdh
PdhCloseQuery
comctl32
InitCommonControlsEx
user32
SetTimer
advapi32
RegCloseKey
shell32
CommandLineToArgvW
Sections
.MPRESS1 Size: 121KB - Virtual size: 408KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE