Static task
static1
Behavioral task
behavioral1
Sample
ddba8952f63058a8a49b06609b7739bf_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ddba8952f63058a8a49b06609b7739bf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ddba8952f63058a8a49b06609b7739bf_JaffaCakes118
-
Size
15KB
-
MD5
ddba8952f63058a8a49b06609b7739bf
-
SHA1
f82b48a85db058290d90048b763ef0067e45d29b
-
SHA256
76f35ab2e794587817c1ce2c799464c435a0e5b0f82b0c38a550c629d6f451ca
-
SHA512
1ad1d6a5b8e0ad611cdbd7b415c3125b2f70e35c40a5a4d5a031b2584c172682f7aad2bd92a99f27234fdc9c2d4bfbb34d209394c2a93e10510191b09e6db216
-
SSDEEP
384:4c5g96SWJRbCj+yGM+3CupRmZcMHzLZtOnYp/hWLQQW:v+Dj+yk3dnmjHmnIZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddba8952f63058a8a49b06609b7739bf_JaffaCakes118
Files
-
ddba8952f63058a8a49b06609b7739bf_JaffaCakes118.exe windows:6 windows x86 arch:x86
33d754f0b49fe89558da448dd77bda08
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
FreeSid
msvcrt
_iob
dbghelp
SymCleanup
iphlpapi
GetIpStatisticsEx
user32
CharToOemBuffW
ws2_32
ntohl
snmpapi
SnmpUtilOidCpy
Sections
.MPRESS1 Size: 10KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE