Static task
static1
Behavioral task
behavioral1
Sample
f58727352f744ac9f4a5b0add450a94e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f58727352f744ac9f4a5b0add450a94e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f58727352f744ac9f4a5b0add450a94e_JaffaCakes118
-
Size
118KB
-
MD5
f58727352f744ac9f4a5b0add450a94e
-
SHA1
ba8cb8ea150a99e30ae03f513190ef161452e695
-
SHA256
0530fe1cc8a2ddc28aa5e1f23c32d97a92c01a7c0fcb960bfff3e831df1f3e40
-
SHA512
88aed78a9d0b4d83e01c3c85adba30e032718d1382c8b14090e7234f274c8e7f01c09d29d492a6cf69995357385f77441a5b88a098ce197ba0e9f56c8cf49818
-
SSDEEP
3072:NDtyHo7EoktD31rUWqHl62gEZ/bL3fE50Lap+8PcfwuNVlW:/L4okjr7ugEpLvER+8PcoUV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f58727352f744ac9f4a5b0add450a94e_JaffaCakes118
Files
-
f58727352f744ac9f4a5b0add450a94e_JaffaCakes118.exe windows:5 windows x86 arch:x86
fa41333005058d4243a8f8b1cd595199
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
_iob
advapi32
RegLoadKeyW
gdi32
PatBlt
user32
GetDC
comctl32
ord413
shell32
ord752
ntdll
NtQuerySystemInformation
netapi32
DsGetDcNameW
ole32
CoInitialize
oleaut32
VariantInit
rpcrt4
NdrClientCall2
duser
InitGadgets
msimg32
AlphaBlend
oleacc
LresultFromObject
Sections
.MPRESS1 Size: 110KB - Virtual size: 572KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE