Static task
static1
Behavioral task
behavioral1
Sample
d51a0b0d2e4fb1400ab3ed1f57e76cf3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d51a0b0d2e4fb1400ab3ed1f57e76cf3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d51a0b0d2e4fb1400ab3ed1f57e76cf3_JaffaCakes118
-
Size
41KB
-
MD5
d51a0b0d2e4fb1400ab3ed1f57e76cf3
-
SHA1
66128d870fdb4e8ac61f043190e4f551d1c95472
-
SHA256
1252e934b22dc2bed95fb622b37641534f4af4786219175014aeb2b6bebfe254
-
SHA512
443ed6c8a22cd8a726d84227ee668ff1775759eaa80daa445e422858f8bfe2ed12b14c32a91f9f29167136b8bd9c2d24cbe3b724a10c151dca77738d4b159a18
-
SSDEEP
768:h+rdUw+iGh7OW15Mq6v1L6V9lC87DuFIA3vb2aSEFIA3vb2aS:h+D+iGh7OWng5uzA3vb9YA3vb9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d51a0b0d2e4fb1400ab3ed1f57e76cf3_JaffaCakes118
Files
-
d51a0b0d2e4fb1400ab3ed1f57e76cf3_JaffaCakes118.exe windows:4 windows x86 arch:x86
773166aabd574f3062101e80329ef203
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
oleaut32
SysFreeString
advapi32
RegCloseKey
user32
CharNextW
shlwapi
SHDeleteKeyW
shell32
SHGetMalloc
urlmon
URLDownloadToFileW
wininet
DeleteUrlCacheEntryW
psapi
GetModuleFileNameExW
ntdll
NtUnmapViewOfSection
Sections
.MPRESS1 Size: 17KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE