Static task
static1
Behavioral task
behavioral1
Sample
17e8fc72ea85b7c47b90196383e53cc4_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
17e8fc72ea85b7c47b90196383e53cc4_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
17e8fc72ea85b7c47b90196383e53cc4_JaffaCakes118
-
Size
384KB
-
MD5
17e8fc72ea85b7c47b90196383e53cc4
-
SHA1
5a23cd338d39080e649e9017d8ed5905465f78d6
-
SHA256
878a3c069414575f9541fc85088345866a68be1cd759675dc8869d221b3e74ea
-
SHA512
ecbb1717379ce4a42f895e628e86fd5930ba084349df2918529ba2d4ab24483dba0701c02cca3039f76f21cb12eb560090b64593b6c78bb14822e9e301e40047
-
SSDEEP
6144:lstLZRv55G5ke9MRs0On1SIFs7Bqwtj9kJ8c0IITjZ0N7/cYL9duz4hwOUu808OG:KzR5GdCs0O1BkBqwtjFc0fTjZOT59oz7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17e8fc72ea85b7c47b90196383e53cc4_JaffaCakes118
Files
-
17e8fc72ea85b7c47b90196383e53cc4_JaffaCakes118.exe windows:4 windows x86 arch:x86
faf57c3354f72d38913bc100499411dc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFullPathNameA
LoadLibraryExA
LocalFree
GlobalLock
GetConsoleCP
IsDebuggerPresent
HeapCreate
FindClose
GetLastError
IsBadReadPtr
FreeEnvironmentStringsA
CloseHandle
GetACP
LocalUnlock
CreateFileA
DisconnectNamedPipe
CreateFileMappingA
GetStdHandle
GetModuleHandleA
CreateEventA
user32
DefWindowProcA
CreateDialogParamA
GetDlgItem
DispatchMessageA
ScrollWindow
EmptyClipboard
GetDC
GetMessageA
PostMessageA
SetFocus
GetIconInfo
EndDialog
IsWindow
DrawIconEx
uxtheme
GetThemeMetric
EnableTheming
GetThemeColor
CloseThemeData
DrawThemeIcon
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ