Static task
static1
Behavioral task
behavioral1
Sample
417bd3f2957e650c97f49fb49dd8784c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
417bd3f2957e650c97f49fb49dd8784c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
417bd3f2957e650c97f49fb49dd8784c_JaffaCakes118
-
Size
100KB
-
MD5
417bd3f2957e650c97f49fb49dd8784c
-
SHA1
9872dd88e50be853568f31dafb0966b8d926ac96
-
SHA256
0cee5473bf7684934c8e60664e78becdcccd3e3be2891c1d209bc5ef003aabb1
-
SHA512
aa52d8bb61961fb1b28a4a3b0234ab6d2c9360825368da40af6717b810d5430c5eb50ca3a8f4ffdce6492c76dc90a4e547c0c112685f4f4e937555db78a18d60
-
SSDEEP
1536:c6J2SBYICW5iJbmjdvHYitL5URbQvbFTS43dLEZeOa5Ls8E49YvOdqPXp3TOGij+:f2SjiJyhgBkvbxSDgp5LsPZOe5jOGIir
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 417bd3f2957e650c97f49fb49dd8784c_JaffaCakes118
Files
-
417bd3f2957e650c97f49fb49dd8784c_JaffaCakes118.exe windows:4 windows x86 arch:x86
18677307e798c43be208f4d1b20b91d6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
FlatSB_SetScrollRange
ImageList_Copy
ImageList_DragLeave
ImageList_GetImageCount
ImageList_SetImageCount
ImageList_Write
kernel32
CreateDirectoryA
CreateMailslotA
CreateSemaphoreA
DeleteAtom
CreateMutexA
Sections
.text Size: 70KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE