Static task
static1
Behavioral task
behavioral1
Sample
f8b9801a7e4831b7fc7a9eecacf65e82_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f8b9801a7e4831b7fc7a9eecacf65e82_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f8b9801a7e4831b7fc7a9eecacf65e82_JaffaCakes118
-
Size
76KB
-
MD5
f8b9801a7e4831b7fc7a9eecacf65e82
-
SHA1
1d90b78c2cdfd4b03bc84832df6f83b881767717
-
SHA256
c52965a06ffe04ae9434602cb01d60ac7c596b58a0a8cf50094fcc7e83dd955e
-
SHA512
f6cd0df128a9a508882b4b769936469ef6514e6f6d877671aaf45390680ab08c5ea06c0e36ae8d4cfd2800358d76f6dcc21fc5b318a83558bcc845f9eb602d21
-
SSDEEP
1536:qTIi+o1mpo9n9LwV2eCytJUyukkwgAAstE:qeoEg9LwV2eC0J7uy5tE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8b9801a7e4831b7fc7a9eecacf65e82_JaffaCakes118
Files
-
f8b9801a7e4831b7fc7a9eecacf65e82_JaffaCakes118.exe windows:4 windows x86 arch:x86
7129a5877d2f61dc5efc5e58f6c1f940
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
OpenClipboard
SetClipboardData
SendDlgItemMessageA
SetDlgItemTextA
MessageBoxA
GetDlgItemTextA
EndDialog
DialogBoxParamA
CloseClipboard
wsprintfA
kernel32
ExitProcess
lstrlenA
lstrcatA
GlobalLock
GlobalFree
GlobalAlloc
GetTickCount
GetModuleHandleA
shell32
ShellExecuteA
Sections
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 594B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 768B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE