Static task
static1
Behavioral task
behavioral1
Sample
1b39a0b732e591faa09ca6978548d282_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1b39a0b732e591faa09ca6978548d282_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1b39a0b732e591faa09ca6978548d282_JaffaCakes118
-
Size
57KB
-
MD5
1b39a0b732e591faa09ca6978548d282
-
SHA1
031d7a52cd37f9e6efa9072ec57275b51fe3e60d
-
SHA256
55fbb91e5d208696a6164c6051a4873477ba9911f87388a803194d99d802d98c
-
SHA512
7f4675820420c2cd2b641966ed5ac6969eda2481689a48d10abc04ac46e25af42934fac6d5da52183d42e2300f2178b1de099ed12f8f16498e1e2ff5bf4249de
-
SSDEEP
768:uRKc2F55e5UM0BtRxRd89dmVPwRn7ve+EQMHVQwr2nE/4QllOlYCXv/:CqQ55GBn8qVPwRn7ve+E3Qy2EQIaYC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b39a0b732e591faa09ca6978548d282_JaffaCakes118
Files
-
1b39a0b732e591faa09ca6978548d282_JaffaCakes118.exe windows:4 windows x86 arch:x86
ffea40d32e0364506bec8a7352e152bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetFocus
CopyIcon
GetDC
LoadCursorA
GetWindowTextLengthA
CreateIcon
CopyRect
gdi32
GetPixel
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
ExtTextOutA
CreatePenIndirect
CreatePalette
CreateBrushIndirect
CreateFontIndirectA
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 50KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ