Static task
static1
Behavioral task
behavioral1
Sample
37833e7d8340be6dcd4ff0d64d2869a4_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
37833e7d8340be6dcd4ff0d64d2869a4_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
37833e7d8340be6dcd4ff0d64d2869a4_JaffaCakes118
-
Size
23KB
-
MD5
37833e7d8340be6dcd4ff0d64d2869a4
-
SHA1
1d7032df2f37071489ebe891c262b162494097c4
-
SHA256
de68597c64e3564d32c5dd755ad782cabb8c14169785cc9df57aea73e5e6e031
-
SHA512
37b7293a427ac5052a35c86d1b935373134f9d6a5fe94bbb35637cadf6ed00a93b5eb29629b938ab396261f98c72e36f25fa249689712ca07d69a67bdacc9fac
-
SSDEEP
384:I0EsEU52maVMoQL8VHXIKhASr081Q1VwKw/X2GG8q17vvxlLjCW0:INAzaV+kV6C31yZOXK8o7DOx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37833e7d8340be6dcd4ff0d64d2869a4_JaffaCakes118
Files
-
37833e7d8340be6dcd4ff0d64d2869a4_JaffaCakes118.exe windows:4 windows x86 arch:x86
71497285b920ff8cd289e96f87d284a1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
CharNextA
advapi32
RegCloseKey
oleaut32
SysFreeString
urlmon
URLDownloadToFileA
Sections
.MPRESS1 Size: 17KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE