Static task
static1
Behavioral task
behavioral1
Sample
f1c230cc6e18cbb151cfeac54ca86e4b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f1c230cc6e18cbb151cfeac54ca86e4b_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f1c230cc6e18cbb151cfeac54ca86e4b_JaffaCakes118
-
Size
81KB
-
MD5
f1c230cc6e18cbb151cfeac54ca86e4b
-
SHA1
2d51afc8038032d31480e2b8148864244852d6da
-
SHA256
6ed3d1f9237c9b8cdb69c77f40b939c38538feda72ae4f2002d2cc127f53c0b1
-
SHA512
1279f69b6c83672c91a9254e7c253d1a0ab7aa4b8b9fab6f1880c32ae02c2003f065e4d7592078a13948e47d55b91de827e3140eb929add807cd1deccae2a0ca
-
SSDEEP
1536:gkawowsD3+ruVaAMOe30wfBXj3Bf30k+ltMl8KR8wRJOuhfORiaA:gkaNND3xT+0wp3atQ8I3BhWRiaA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f1c230cc6e18cbb151cfeac54ca86e4b_JaffaCakes118
Files
-
f1c230cc6e18cbb151cfeac54ca86e4b_JaffaCakes118.exe windows:4 windows x86 arch:x86
c1c984d79dfd7a66a305255e434ac247
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ModifyMenuW
LoadMenuW
MapDialogRect
IsChild
GetWindow
IsZoomed
comctl32
ImageList_Destroy
ImageList_GetIcon
ImageList_Read
ImageList_SetImageCount
DrawInsert
FlatSB_SetScrollRange
urlmon
GetClassURL
CoInternetGetSession
IsJITInProgress
CreateAsyncBindCtx
InstallFlash
GetClassURL
comdlg32
WantArrows
ChooseColorW
GetOpenFileNameW
LoadAlterBitmap
CommDlgExtendedError
Sections
.text Size: 48KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE