Static task
static1
Behavioral task
behavioral1
Sample
effd93491b575401bbcfa41f3cc4fe72_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
effd93491b575401bbcfa41f3cc4fe72_JaffaCakes118
-
Size
596KB
-
MD5
effd93491b575401bbcfa41f3cc4fe72
-
SHA1
c5824c1766122c61a2d43598381ae766ee66c57e
-
SHA256
573f8c368f23001e705796fa03fd2444fd967288798af2b7f0e901f9376e872a
-
SHA512
07b2f7557a075454b0f0cb956fbd002a236b6141cb7a34acc393caebb8644f3ed492b116ecef08055026bc422e3feca14a267bc4b88de12e84f13d3a3c572fcf
-
SSDEEP
12288:rfaUUC0TbTzLzFl6VXupgJCiMExHUh2yLvLe5TR:jMTbTnzD6V+eCiBHUh3LSTR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource effd93491b575401bbcfa41f3cc4fe72_JaffaCakes118
Files
-
effd93491b575401bbcfa41f3cc4fe72_JaffaCakes118.exe windows:4 windows x86 arch:x86
6965a452c75aac230a17eceb42ae8cbf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
advapi32
RegCloseKey
ole32
OleRun
Sections
.MPRESS1 Size: 465KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 68KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE