Static task
static1
Behavioral task
behavioral1
Sample
1492d81a62a1236da28aa37984096c4b_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
1492d81a62a1236da28aa37984096c4b_JaffaCakes118
-
Size
124KB
-
MD5
1492d81a62a1236da28aa37984096c4b
-
SHA1
671e50f6fb21ca8cc85cb4ef0e85f4b92809ac29
-
SHA256
635f9b195c3ac823faa88e422e03c318d2014c22cc2447ffd690d56146451459
-
SHA512
23a4e2be0a631e8b6f6c207adadbd809c213b8a5d2b612f77ef8d8e0898504c5f7d1f92e17ac96adfed22cadfa82c6e5f5756a416f0ed4f0b55690fab7ee7f1f
-
SSDEEP
1536:WcopNxidL60p8eorYpIBCxb1Eo8d94GFMHoH+TIqV1wOehrLjWoksMCOylUBXL1F:R5dL60aeorYptQiG+IeT7UjWowVkA1F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1492d81a62a1236da28aa37984096c4b_JaffaCakes118
Files
-
1492d81a62a1236da28aa37984096c4b_JaffaCakes118.exe windows:6 windows x86 arch:x86
1d82b8823340b3c55707c744cc0839ea
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetLastInputInfo
SendMessageA
CopyIcon
DlgDirListW
GetKeyState
GetMenuContextHelpId
winscard
g_rgSCardT1Pci
ole32
OleFlushClipboard
gdi32
OffsetClipRgn
msvcrt
memmove
advapi32
GetSecurityDescriptorRMControl
RemoveUsersFromEncryptedFile
kernel32
GetNamedPipeServerProcessId
GetEnvironmentStrings
GetThreadLocale
GetThreadTimes
GetCurrentThread
GlobalMemoryStatusEx
GetBinaryTypeA
shlwapi
ord29
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.crt1 Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt5 Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt2 Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.q Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 196B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ