Static task
static1
Behavioral task
behavioral1
Sample
f23808442b5cc47824866844b6e4cc0a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f23808442b5cc47824866844b6e4cc0a_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f23808442b5cc47824866844b6e4cc0a_JaffaCakes118
-
Size
31KB
-
MD5
f23808442b5cc47824866844b6e4cc0a
-
SHA1
2b38f93659cf9f17ba4f7ff156a0eeb32f9c8722
-
SHA256
59206832e7deec69b6ad0929ee283a6a179354e38bfedfca73f84a8e45f1592f
-
SHA512
b4292cc178dfc73a06080b7f117b93e8ae845391571ff563aac712b2207e197bb93f37a1d3f7ff365f21d1614d698baa48ae3396e2a8c888afaba1feea56aad4
-
SSDEEP
768:20K2JuYQah2j7LBbsi8I0cVxWZId976S0i50V8MOks0tFjqS:hqasj7lQiMcVQZIF0i50VYk7Rp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f23808442b5cc47824866844b6e4cc0a_JaffaCakes118
Files
-
f23808442b5cc47824866844b6e4cc0a_JaffaCakes118.exe windows:4 windows x86 arch:x86
203ec172e8b4c7bf320506b4cd421061
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumResourceTypesA
GetConsoleTitleA
GetDefaultCommConfigW
SetEnvironmentVariableA
GetPrivateProfileStringW
SetVolumeLabelW
user32
OemToCharW
IsDialogMessageA
LoadStringA
DrawStateA
DrawTextA
IsCharAlphaNumericW
SetUserObjectInformationA
gdi32
CreateScalableFontResourceA
GetGlyphIndicesA
GetCharABCWidthsA
CreateFontIndirectExA
GetCharABCWidthsA
Sections
.share Size: 23KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.��� Size: 1024B - Virtual size: 653B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ