Static task
static1
Behavioral task
behavioral1
Sample
60f308c539feac706dcd2c85831771cb_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
60f308c539feac706dcd2c85831771cb_JaffaCakes118
-
Size
144KB
-
MD5
60f308c539feac706dcd2c85831771cb
-
SHA1
862d8459c8114216aee8794282dc0cf457630c97
-
SHA256
955c85525dae7239e7014520cf100f59f9303ef86c9dcd3449d36673de364857
-
SHA512
ed08e61e2c1aa7659a9421dc963e047ed0ad89318388af50fbe46303cafa1d4962dee4fb97f54dc060a72b79faf6168c71158d6ffb924d7a6b4062fbb62a049b
-
SSDEEP
3072:Dlll3NCpoO6BfDbCgwF+a5p1n4eM2kXjSBGNREQW:DhocfDbC/Fr4PzSBGNRL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60f308c539feac706dcd2c85831771cb_JaffaCakes118
Files
-
60f308c539feac706dcd2c85831771cb_JaffaCakes118.exe windows:4 windows x86 arch:x86
e17a499e5b0ec371edeb2ec832b388c7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
PropertySheetW
gdi32
RemoveFontResourceW
user32
wsprintfA
imm32
ImmDisableIME
setupapi
CM_Get_Device_Interface_ListW
kernel32
lstrlenA
GlobalDeleteAtom
GetModuleHandleA
GetCurrentProcessId
OutputDebugStringW
GetBinaryTypeA
GetModuleFileNameW
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.coda Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.kP Size: 4KB - Virtual size: 374B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 108KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ