Static task
static1
Behavioral task
behavioral1
Sample
1b73c67c3effa67d86c8a4469d4cee14_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1b73c67c3effa67d86c8a4469d4cee14_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1b73c67c3effa67d86c8a4469d4cee14_JaffaCakes118
-
Size
17KB
-
MD5
1b73c67c3effa67d86c8a4469d4cee14
-
SHA1
bc63b053e548b9f19f923824a0ad51b532e7559f
-
SHA256
1771200183416ea28fb5a8ff50f0ba017e62aef9c5efc5e8e048434c07a14e85
-
SHA512
38d3f3a22618d559eee65610f2c4b4c6362d45e55986f75a34719b55fe88d644f1961ba4dbeb68ae12ece31566935e451d9d5a572ed95b603f6a4f9cd0092da9
-
SSDEEP
192:9Hc6UPV9ABIxrzH2aDmZ4WVbkYl25SXuSWcs4YLzPuhjXjJMg8vpBifNFoC3+oxD:9HcRPVnD2ImqCISe6s4Y2hDjj5Po4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b73c67c3effa67d86c8a4469d4cee14_JaffaCakes118
Files
-
1b73c67c3effa67d86c8a4469d4cee14_JaffaCakes118.exe windows:4 windows x86 arch:x86
09e2e2196924794ebf4b5b73f983fc82
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ClipCursor
DefDlgProcW
GetComboBoxInfo
GetDoubleClickTime
kernel32
VirtualProtect
FindAtomW
ExpandEnvironmentStringsW
GetCPInfoExW
Sections
.text Size: 11KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE