Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_71683ed2086bceb4febaa870ff3dc90b.exe
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_71683ed2086bceb4febaa870ff3dc90b
-
Size
2.9MB
-
MD5
71683ed2086bceb4febaa870ff3dc90b
-
SHA1
add97aa9fb26f64c81df5df1b932f0bff630525c
-
SHA256
f218ff57753dedadb3cdd2d616fe802cc336031629d10e9c6b07e0e7a4e04a81
-
SHA512
38fde3cc45ec175414ec318a519b9e8f8a9af05bef6b44a920ec89b77e3dbfc80d107d30d733c3caefdbbc0a6a8f071473d149ce9c563c759001aeb9931b0b19
-
SSDEEP
49152:RXy2gkTkvSaY0q8/df24onCU6qmS3W6bts/OYTDJVV9M+XcwDhC3Mlb:I2dTcSa+8/N2+1oBb6/rTD/PM9wDM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_71683ed2086bceb4febaa870ff3dc90b
Files
-
JaffaCakes118_71683ed2086bceb4febaa870ff3dc90b.exe windows:5 windows x86 arch:x86
2d0d211e431cd1aaf0f60cd5db3bd89e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
GetDesktopWindow
advapi32
GetUserNameA
shell32
SHGetFolderPathA
shlwapi
PathMatchSpecA
gdiplus
GdiplusStartup
Sections
.MPRESS1 Size: 2.7MB - Virtual size: 7.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 190KB - Virtual size: 189KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE