Static task
static1
Behavioral task
behavioral1
Sample
f1120d464a0b151cc5c4a00b70ee2606_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f1120d464a0b151cc5c4a00b70ee2606_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f1120d464a0b151cc5c4a00b70ee2606_JaffaCakes118
-
Size
151KB
-
MD5
f1120d464a0b151cc5c4a00b70ee2606
-
SHA1
3c0ee3129ffcf7687202262ba2a59bfe56591e18
-
SHA256
2012b6acc230ac5d67708b6406f09a935c2ae6c4e50ed8d0709fb7bae76574ae
-
SHA512
4a6e436fd178b91929d4c5b5e5efe15d6b79a01c445f816df0f052dbb141d2d0672de93cc8d05ead5adc248a0ff0c9c7a4e5c07400426d2c580268a8c4363050
-
SSDEEP
3072:y6xGwsvTZtXQcxUpCwzXrztkD3jaGidYMm9rElDjlKfHn:yXX9lQcXQ7yD2OWDofHn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f1120d464a0b151cc5c4a00b70ee2606_JaffaCakes118
Files
-
f1120d464a0b151cc5c4a00b70ee2606_JaffaCakes118.exe windows:4 windows x86 arch:x86
2dff052f5ea71c04339424ed04ff9607
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetMapMode
GetTextMetricsW
EqualRgn
EndDoc
Escape
FillPath
CreatePalette
GetBkColor
GetBrushOrgEx
GetCharWidthW
GetClipBox
GdiFlush
GetMapMode
GetMiterLimit
GetPixel
CreateCompatibleDC
FillRgn
GetRelAbs
SetBkColor
GetTextFaceW
kernel32
ExitProcess
InitAtomTable
CreateFileW
WriteFile
ReadFile
SetConsoleCP
GetModuleHandleW
GetProcAddress
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 146KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE