Static task
static1
Behavioral task
behavioral1
Sample
656750f875112414a75fb4bf32a3353a_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
656750f875112414a75fb4bf32a3353a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
656750f875112414a75fb4bf32a3353a_JaffaCakes118
-
Size
275KB
-
MD5
656750f875112414a75fb4bf32a3353a
-
SHA1
1f66bba3d8a9da44b0ebe7a84c7b240b6eba3705
-
SHA256
761107a1e9e685c4bbce78c45111db8c0279bf530b123f5370620bcc6aa0b2bf
-
SHA512
7cde504a285f343972877b3e50cad0fa4b0f558a987288832e88d8f1d08062bc1b379220480f760f8469f6d10423b29f19538fca1bd8acd5bafaa29fb7a9ae90
-
SSDEEP
3072:WyZXE1FYZcYbV/wQvFUO+x33/mKOQ+/pclnNu8qLAZXNOp/PK7nbs5peTE0E925h:W0moc+VvFL+x33zORyI2OlPK7nbgpm9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 656750f875112414a75fb4bf32a3353a_JaffaCakes118
Files
-
656750f875112414a75fb4bf32a3353a_JaffaCakes118.exe windows:5 windows x86 arch:x86
39e8edd8799655e32af9a32a250bb226
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
OleDuplicateData
user32
GetSysColor
GetShellWindow
GetClipboardOwner
WindowFromPhysicalPoint
MenuItemFromPoint
GetKeyboardType
GetProcessWindowStation
SetMenuInfo
powrprof
GetPwrDiskSpindownRange
kernel32
SetThreadLocale
GetCommandLineA
GetProcessIdOfThread
GlobalMemoryStatus
GetStdHandle
IsValidLocale
GetQueuedCompletionStatusEx
PostQueuedCompletionStatus
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 107KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
CONST Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ