Static task
static1
Behavioral task
behavioral1
Sample
1766a25b8df6fa2a92d257ab40307d74_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1766a25b8df6fa2a92d257ab40307d74_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1766a25b8df6fa2a92d257ab40307d74_JaffaCakes118
-
Size
33KB
-
MD5
1766a25b8df6fa2a92d257ab40307d74
-
SHA1
d2e137d6f1a755acafaa31476eae48913765c956
-
SHA256
15086fb5787b758ed26567cb4b584eb32743943a6b2287d37cd5252ecad3c506
-
SHA512
5cf5501a2c72893408f13c5b01166e47ecfe7e26fab8c5c1aaf847c754a5c3dc59ac10aa1dad05a0fda1fdaa617a5145b30b6b8422442953100a9972ddd08780
-
SSDEEP
384:MfVtW0N34jPIcIyOeY7wTWXnpVCJ/GTDyE1tqRmNsbKf2/JqB4NU4z/SDbsIbXFT:MNN34jk5pVCs5KQfkq4X/SfR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1766a25b8df6fa2a92d257ab40307d74_JaffaCakes118
Files
-
1766a25b8df6fa2a92d257ab40307d74_JaffaCakes118.exe windows:4 windows x86 arch:x86
37864467a36d50fb91fb94ca0b7c38c6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
CopyFileW
CreateThread
DefineDosDeviceW
EnumResourceTypesW
GetCommConfig
GetConsoleWindow
GetDateFormatW
msvcrt
_mbccpy
_mbctombb
_mbsdec
_pctype
_snprintf
_snwprintf
shell32
SHLoadOLE
StrStrIA
DuplicateIcon
Sections
.text Size: 20KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE