Static task
static1
Behavioral task
behavioral1
Sample
03177be48e0a22a4a31f327384d9b7db_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
03177be48e0a22a4a31f327384d9b7db_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
03177be48e0a22a4a31f327384d9b7db_JaffaCakes118
-
Size
34KB
-
MD5
03177be48e0a22a4a31f327384d9b7db
-
SHA1
0ef1fe20668c91eb7315c35e19966243d6b05b87
-
SHA256
bbdd3b1843f495f65ba257b2de72dff91b127aa82728b1bc43a9710b3b88fb7d
-
SHA512
eca9a5421167e3253f9c654611a6ef75a2e917862288069b61c1862120dedf17ff27144981242ddd9b5652b7f78c9f60093810aaed533748eead6e235cc1ee3f
-
SSDEEP
768:5bD1a7Fbjzurzk0q8Htu4Bpd/C5OV8/blo5Wn:Bg1zqz+4BQOa/blEW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03177be48e0a22a4a31f327384d9b7db_JaffaCakes118
Files
-
03177be48e0a22a4a31f327384d9b7db_JaffaCakes118.exe windows:4 windows x86 arch:x86
2b6906acf5d8349b80d31ba15df97428
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SetDIBColorTable
SetICMMode
SetRelAbs
ResetDCW
StretchBlt
UpdateColors
SaveDC
TextOutW
shell32
StrStrIA
SHAppBarMessage
SHFormatDrive
urlmon
GetClassFileOrMime
IsLoggingEnabledA
URLOpenStreamA
CoInstall
AsyncInstallDistributionUnit
IsValidURL
Sections
.text Size: 20KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE