Static task
static1
Behavioral task
behavioral1
Sample
feecbd54a0f794e4e10d7565f3456bf0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
feecbd54a0f794e4e10d7565f3456bf0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
feecbd54a0f794e4e10d7565f3456bf0_JaffaCakes118
-
Size
446KB
-
MD5
feecbd54a0f794e4e10d7565f3456bf0
-
SHA1
c2cdc2044e1b990078dbe3340daab0278809b67d
-
SHA256
ac7359e87d69ba99dbcfb315d6916db705d900348a5da83e8aff17b6e81433ba
-
SHA512
73c381a309744f36c97fdf0543561772d35003146c83c7bba4c237d8f872ec443b28a3828fcfca64479ac60b438645f94bac1e0d94ac549177982d8e3e2d2d30
-
SSDEEP
6144:KcOQ+blcHsznxxA1h9lbD1Y/uDj+DU4/HBXpXNA2+7xsbZgt6q2T:K2+RPz81r11Y/uDyY45Xt6xsbZgt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource feecbd54a0f794e4e10d7565f3456bf0_JaffaCakes118
Files
-
feecbd54a0f794e4e10d7565f3456bf0_JaffaCakes118.exe windows:6 windows x86 arch:x86
e846fab9e0c213489f2d26f6d3615e32
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
FreeSid
msvcp110
?_Xbad_alloc@std@@YAXXZ
msvcr110
exit
ws2_32
WSAGetLastError
Sections
.MPRESS1 Size: 78KB - Virtual size: 772KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE