Static task
static1
Behavioral task
behavioral1
Sample
f6b727d0bcd07d601f11fbef83d27af4_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f6b727d0bcd07d601f11fbef83d27af4_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f6b727d0bcd07d601f11fbef83d27af4_JaffaCakes118
-
Size
82KB
-
MD5
f6b727d0bcd07d601f11fbef83d27af4
-
SHA1
ab204b949d4955b857894ac30a312f61c83ed356
-
SHA256
239508dc4eedcf53a59753f39cb5720f9cd1aed018b46088ed76675ed4462e97
-
SHA512
dd4a1f256c5b2e399851ae39591c7ef0c7c9902888e954f168e82e73fae2b6a394feed5b5e2929b102449c64b9a942ef5de669667cbf200b88807f969522769b
-
SSDEEP
1536:vpUdmLFj0MGB678uyeuSSB1HSXs0A+9HA45rTV4azOnkyjFdP8A:vpvLFj0MCU8XeuFxS0+9HA45/iazOnkW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6b727d0bcd07d601f11fbef83d27af4_JaffaCakes118
Files
-
f6b727d0bcd07d601f11fbef83d27af4_JaffaCakes118.exe windows:4 windows x86 arch:x86
206da3460e6752dbee5ac632f6034fe0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EmptyClipboard
DrawTextA
DispatchMessageA
DestroyIcon
DestroyCursor
DestroyCaret
DeleteMenu
CreateMenu
CreateIconFromResourceEx
CreateIcon
CreateDialogParamA
CreateCursor
CreateAcceleratorTableA
CopyRect
CopyImage
CharNextA
EnableMenuItem
CharLowerA
kernel32
lstrcpynA
WriteFile
UnmapViewOfFile
TlsGetValue
Sleep
OpenFile
GetSystemTimeAsFileTime
GetSystemTime
GetLocalTime
GetLastError
GetCommandLineA
ExitThread
EnumResourceTypesA
EnumResourceLanguagesA
lstrlenA
Sections
.text Size: 1024B - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data0 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE