Static task
static1
Behavioral task
behavioral1
Sample
fda8a6497d0a4933b8f4b732ec003132_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fda8a6497d0a4933b8f4b732ec003132_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fda8a6497d0a4933b8f4b732ec003132_JaffaCakes118
-
Size
905KB
-
MD5
fda8a6497d0a4933b8f4b732ec003132
-
SHA1
a96619286d92717c40ccee0a624caab02572b7b2
-
SHA256
5a10d1d1518a17198ee5b435bab9e8b4c06d8fa7535465a669d75891fe6955d4
-
SHA512
41acd49b6f2cdaecd9cb39ab5f146d8d1f14f18a6f5a467b9cb5aedb0723aaf34ee78a2dafd7e8645b0932910027cd9c38fe59500cd35d9918a6f943ffc644fc
-
SSDEEP
6144:wP/3d6LxKrmQUFvpLdJIO6MsubRuQM2NAxFQhKnmyc4BtQ/ihgeY:wXN6M6Q0AxFS+I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fda8a6497d0a4933b8f4b732ec003132_JaffaCakes118
Files
-
fda8a6497d0a4933b8f4b732ec003132_JaffaCakes118.exe windows:5 windows x86 arch:x86
400ae94c4f548ab01045ff5f2aebc813
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
Imports
kernel32
GetModuleHandleA
GetProcAddress
gdiplus
GdiplusStartup
user32
CharNextW
advapi32
RegCloseKey
ole32
CoInitialize
oleaut32
VarUI4FromStr
shlwapi
PathAppendW
comctl32
InitCommonControlsEx
Sections
.MPRESS1 Size: 42KB - Virtual size: 984KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 858KB - Virtual size: 858KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE