Static task
static1
Behavioral task
behavioral1
Sample
8b6b161b2b25c45e63c0d8d8b9750cd2_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
8b6b161b2b25c45e63c0d8d8b9750cd2_JaffaCakes118
-
Size
120KB
-
MD5
8b6b161b2b25c45e63c0d8d8b9750cd2
-
SHA1
a420eb9ea3bb2a56b6c2843d0715d019741a9963
-
SHA256
b11c362c187016914093b215ae482bee8b6b854bf9d3a9ee1177ba77fa38eefa
-
SHA512
ebfec13bf9fb3ef6b43591c272a64d734fdf131e2bc4ba2b8ec8989d09cc48bb1eb9ac12edbb0d38608131f0ebf15c7c7c4586f92cd35fd15a4e9e287f5ade68
-
SSDEEP
3072:GcY0kWJKdUes1AOwdD6iML0gLlXQEYSRkd12JH:Bnm6uO6GggLiE6k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b6b161b2b25c45e63c0d8d8b9750cd2_JaffaCakes118
Files
-
8b6b161b2b25c45e63c0d8d8b9750cd2_JaffaCakes118.exe windows:4 windows x86 arch:x86
63cca2c005bd64fcb8fac05450a5b2e4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndDialog
GetWindowTextA
GetCapture
DialogBoxParamA
CreateDialogParamA
GetCursor
GetCursorPos
GetWindow
IsClipboardFormatAvailable
GetIconInfo
LoadIconA
GetCaretBlinkTime
kernel32
FreeEnvironmentStringsA
GetEnvironmentStrings
ReadFile
GlobalAlloc
lstrcmpiA
lstrcatA
GetSystemTimeAdjustment
CreateFileW
lstrcmpA
Sleep
GetLastError
VerLanguageNameA
msvcrt
wprintf
sprintf
exit
winmm
timeGetSystemTime
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt0 Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 608B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ