Static task
static1
Behavioral task
behavioral1
Sample
fce244c142b30482eb4d6a3f20e43a6d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fce244c142b30482eb4d6a3f20e43a6d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fce244c142b30482eb4d6a3f20e43a6d_JaffaCakes118
-
Size
17KB
-
MD5
fce244c142b30482eb4d6a3f20e43a6d
-
SHA1
a31193bb4f5103c4647bc0d83a1d9a29c7929bf3
-
SHA256
e776e9874772c9f4978d3cfdc42c4303cfb1146cddbc9f1fc868bd20d570eda2
-
SHA512
0748a6e5afa9fcf3a88adf46565092886de2f7f946f9e90a8d9fa4dc70a15c63e7239478ae112e16d850e51ae1d98890906f105285f28a79561faffd2021900a
-
SSDEEP
384:Fn5xfuCsLdyJO5TMiI3xpLFwVER3mM7vvxlLKW1MWcy:duCsLdyJIMiI3xpLyVc3h7D5Gy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fce244c142b30482eb4d6a3f20e43a6d_JaffaCakes118
Files
-
fce244c142b30482eb4d6a3f20e43a6d_JaffaCakes118.exe windows:6 windows x86 arch:x86
0a75b7f5adc6ae3e0d6f9ba0dedbd3bd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
FreeSid
msvcrt
exit
loadperf
LpAcquireInstallationMutex
user32
LoadStringA
Sections
.MPRESS1 Size: 11KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE