Static task
static1
Behavioral task
behavioral1
Sample
daaeb460adde298fb088e99d09bed8d4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
daaeb460adde298fb088e99d09bed8d4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
daaeb460adde298fb088e99d09bed8d4_JaffaCakes118
-
Size
36KB
-
MD5
daaeb460adde298fb088e99d09bed8d4
-
SHA1
e58b8cacaae66c9f6c3bd98026193c5f69f7f9c0
-
SHA256
57be802bb7db24277785fa9df69ab2487298bb71b45403eb1de8a649181ba410
-
SHA512
7d485857d8f5456df435dda06e5093f7a6ecebf68a63c73a05dbef8c5ce950368449eec87ac28151ad6bcf982eb29ecd17d43126a184b75b6e8ab4f1220dd269
-
SSDEEP
768:pD2VyYkzecEn41KuXg8Nbo92p2IXcAHCW7bH9jr7Dl/6k1:pUyYkz5bQ2p2IXxHt7bH9N/6G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource daaeb460adde298fb088e99d09bed8d4_JaffaCakes118
Files
-
daaeb460adde298fb088e99d09bed8d4_JaffaCakes118.exe windows:5 windows x86 arch:x86
a1dc80d75948f3f3caec9cdd6d6171c4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
exit
advapi32
GetAce
user32
wsprintfW
ntlsapi
NtLSFreeHandle
ole32
CoInitialize
oleaut32
SysStringByteLen
ws2_32
accept
psapi
EnumProcesses
Sections
.MPRESS1 Size: 25KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE