Static task
static1
Behavioral task
behavioral1
Sample
f8890f73bf1d08fed0c090d911661d2a_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f8890f73bf1d08fed0c090d911661d2a_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f8890f73bf1d08fed0c090d911661d2a_JaffaCakes118
-
Size
78KB
-
MD5
f8890f73bf1d08fed0c090d911661d2a
-
SHA1
3002b2b0688ee737f99122352cae5de00a658bf3
-
SHA256
491f50cca6e9cd3a5c960548d8740436c9f193f53628814fbb5d74ace17212de
-
SHA512
e16833c1dbfd049054d87c1ee5cb3a4e96125d792096e6f8b7cdcaa4a2e93bd6d877fddb7b1df12510796d494b7a5af2f1ab2d1a51f93cd963f3057c1087e9ac
-
SSDEEP
1536:XTqxiUJIxxHIiUwsHP1RW6rr57eKTtOcdjVLap8fBwvbXrmgBb9mBG:m6xGwsvTZtXQcxUpCwzXrzt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8890f73bf1d08fed0c090d911661d2a_JaffaCakes118
Files
-
f8890f73bf1d08fed0c090d911661d2a_JaffaCakes118.exe windows:4 windows x86 arch:x86
2dff052f5ea71c04339424ed04ff9607
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetMapMode
GetTextMetricsW
EqualRgn
EndDoc
Escape
FillPath
CreatePalette
GetBkColor
GetBrushOrgEx
GetCharWidthW
GetClipBox
GdiFlush
GetMapMode
GetMiterLimit
GetPixel
CreateCompatibleDC
FillRgn
GetRelAbs
SetBkColor
GetTextFaceW
kernel32
ExitProcess
InitAtomTable
CreateFileW
WriteFile
ReadFile
SetConsoleCP
GetModuleHandleW
GetProcAddress
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ