Static task
static1
Behavioral task
behavioral1
Sample
0a7836f9d227b00794890c24c221a789_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0a7836f9d227b00794890c24c221a789_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0a7836f9d227b00794890c24c221a789_JaffaCakes118
-
Size
1.0MB
-
MD5
0a7836f9d227b00794890c24c221a789
-
SHA1
4853faba2b6213400610723918ae63c4072dbe9b
-
SHA256
f8270d1f6b62c497efaa7443202bac52b77d7086d5267ca7c596f00068feda2f
-
SHA512
4a39fae5cbebeaf8af251b42bfd35bcb879ad77967ca7d60f8922c171b59426f7480509f8eb4993b6769be06bf5482b45bd1a4d4d34435ba4cb743723682859b
-
SSDEEP
24576:WQbdifWiEIzMbevf7XnxTOQk5JFOdCz0cq7z1QL:/HiEIz/5OlIcjL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a7836f9d227b00794890c24c221a789_JaffaCakes118
Files
-
0a7836f9d227b00794890c24c221a789_JaffaCakes118.exe windows:4 windows x86 arch:x86
5d5a02ea2cf9779fed09a4bee1500f28
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenFile
user32
CreateWindowStationW
CharToOemW
SetWindowRgn
IsRectEmpty
GetKeyboardState
PrivateExtractIconsA
GetDCEx
Sections
.code Size: 12KB - Virtual size: 10.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 964KB - Virtual size: 962KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE