Static task
static1
Behavioral task
behavioral1
Sample
f31d2d06ff2541365a50ae37826cc932_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
f31d2d06ff2541365a50ae37826cc932_JaffaCakes118
-
Size
111KB
-
MD5
f31d2d06ff2541365a50ae37826cc932
-
SHA1
892124747e3ec5c0282b3abbb57c2610a89b638a
-
SHA256
5513841e8b8678671d62cd8ca2aa1e336e24388925690c66fd6299c7eb42f0b5
-
SHA512
7b4845a2629740cf703c1ac868407d3eda6a8b51f1ea962cb6e4e665d702e4b3780445992282b1bd43f302765321d0ed49ebada8a66c6ff33a7d9892ba240152
-
SSDEEP
3072:SYuBUQXio7Idl17lfwh1btJ6S6Z7Qp9dO7uQpffjdSFp:IU+ijxeh6S6ZkjQtfjcr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f31d2d06ff2541365a50ae37826cc932_JaffaCakes118
Files
-
f31d2d06ff2541365a50ae37826cc932_JaffaCakes118.exe windows:4 windows x86 arch:x86
6bf72aceebe8cba515ce668416085b39
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_lclose
VirtualLock
WriteConsoleA
user32
GetDC
GetKeyboardState
GetListBoxInfo
GetMenuInfo
Sections
.text Size: 73KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE