Static task
static1
Behavioral task
behavioral1
Sample
f3d598470208e5d60a4c23c0318cc02b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f3d598470208e5d60a4c23c0318cc02b_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f3d598470208e5d60a4c23c0318cc02b_JaffaCakes118
-
Size
66KB
-
MD5
f3d598470208e5d60a4c23c0318cc02b
-
SHA1
d5ac65e7b8df36810d26ccef29f052dd443a54a2
-
SHA256
87c09fa58fca71463eafa28e096516b9bd1d5b841a68786a1eaa20eeb9699991
-
SHA512
f58d928d5e25e9b5623a7875d1bd27acadcb3587b7a1ddeb56e4d30e0921fdb3814234efe557660570a5424089044e4fede35e8104bdf5fd2874b3fe1f948a0e
-
SSDEEP
1536:+p0Q/VslnckJ1Zdko6m0pANwrRtPnnUsICTFtq+jqZhZ:+yQ/GlnhXZdZinRtjICRw+jqZh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3d598470208e5d60a4c23c0318cc02b_JaffaCakes118
Files
-
f3d598470208e5d60a4c23c0318cc02b_JaffaCakes118.exe windows:4 windows x86 arch:x86
c8d2d9f672786803dcd611ea74090ebd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
InvertRgn
PolyPatBlt
RectVisible
CreateRectRgn
msvcrt
__p__wpgmptr
_copysign
__p__tzname
_mbsnicmp
_dup
_getws
_inp
kernel32
GetCurrentProcessId
GetThreadLocale
CreateEventW
GetCommConfig
LocalAlloc
LocalHandle
Sections
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE