Static task
static1
Behavioral task
behavioral1
Sample
35168553ad97404153a7d1c7546c34be_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
35168553ad97404153a7d1c7546c34be_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
35168553ad97404153a7d1c7546c34be_JaffaCakes118
-
Size
110KB
-
MD5
35168553ad97404153a7d1c7546c34be
-
SHA1
0aba46094f652e84acf577e14cdddda450d06714
-
SHA256
65d82b4f93f7961d476a2472fefe6ff72bc202c3990e28492bdd554567b4edbd
-
SHA512
7f719934d7c12344e6be9499d0e5ab84c78ceceeecf36bf2ee961b31b612eb1611b22c35598edf78575828677a8f707ba7f112fa06a3237c2f7939d00cfe1eff
-
SSDEEP
1536:YK5UTB62iZiX6tgw0gl/Y/OGpwvuqxz6+pkoOhq7+9+ZrxiURDoq4OZZZLlCIib:DHZvtgzg25Gvuqx2BqSIZrxjRD68wb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35168553ad97404153a7d1c7546c34be_JaffaCakes118
Files
-
35168553ad97404153a7d1c7546c34be_JaffaCakes118.exe windows:4 windows x86 arch:x86
cb759d97838683bfadee50d8ac6d0f56
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegEnumKeyW
RegDeleteValueA
RegEnumKeyA
comctl32
CreateToolbarEx
CreateUpDownControl
DrawStatusText
InitCommonControls
CreateStatusWindowW
ImageList_DrawEx
gdi32
CreateDIBitmap
ExtTextOutA
CreateCompatibleDC
CreateHalftonePalette
user32
LoadCursorA
IsWindow
CopyIcon
DrawIcon
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 54B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 646B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ