Static task
static1
Behavioral task
behavioral1
Sample
f7539921c654d67056ef17e9262e3fb6_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f7539921c654d67056ef17e9262e3fb6_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f7539921c654d67056ef17e9262e3fb6_JaffaCakes118
-
Size
214KB
-
MD5
f7539921c654d67056ef17e9262e3fb6
-
SHA1
d84d4190411d0ebe1c9d96abef371b4dbfe7a1a6
-
SHA256
d48e97ef28901c0fad4a0329d78aab2ad9b021db4f80b03defdefc75851794a1
-
SHA512
e33b165da624556b1ecbb30628ffd79ddde208332a96892ff1ff9f116c49686fef13822002b739b77ab8ea0e525ebb85233607f26e47d0a401dbd389e7e5c2f1
-
SSDEEP
6144:cIVol8asxkXY3G0Vp/Dt187v9eA2E8FFjFURXx3NJ+P:PO6xx8Y3G0v/D30KUb3NEP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7539921c654d67056ef17e9262e3fb6_JaffaCakes118
Files
-
f7539921c654d67056ef17e9262e3fb6_JaffaCakes118.exe windows:4 windows x86 arch:x86
56554d73b8fb3b457326c18de9125e6f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
GetFileType
FindClose
CreateFileW
LoadLibraryA
GetTempPathW
GetModuleHandleA
CloseHandle
GetTempPathA
GetModuleHandleW
GetStartupInfoA
user32
EmptyClipboard
BeginPaint
IsWindowEnabled
DestroyWindow
CloseWindow
ChangeDisplaySettingsA
FillRect
CreateWindowExA
CloseClipboard
GetWindowRect
DrawTextW
IsWindowVisible
GetWindowTextA
DefWindowProcW
EnableWindow
ShowWindow
GetWindowTextW
DefWindowProcA
DeleteMenu
DrawTextA
GetWindow
gdi32
CreateCompatibleBitmap
advapi32
RegCloseKey
RegOpenKeyExA
oleaut32
SafeArrayCopy
SysAllocStringByteLen
CreateErrorInfo
SysAllocString
SetErrorInfo
GetErrorInfo
SysAllocStringLen
SysFreeString
SafeArrayCreate
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strcmp
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ