Static task
static1
Behavioral task
behavioral1
Sample
606b0d266a93c33c22bb4cf1eb92f2f0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
606b0d266a93c33c22bb4cf1eb92f2f0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
606b0d266a93c33c22bb4cf1eb92f2f0_JaffaCakes118
-
Size
268KB
-
MD5
606b0d266a93c33c22bb4cf1eb92f2f0
-
SHA1
a082c50a232b8fb9c7ee4a2423457e1142fddaf4
-
SHA256
64990def08dc40e256eebef6a63fb8c7f746d8b2bdfa11df3e00b68df3eae930
-
SHA512
a4c94454675362eac9a8f801d6115e1299b9ef2329aef1ff3c0ae72fa43c90795a37eed8025d30e1655c267e767bc8019016b695efff1935134df2c6eecbec53
-
SSDEEP
3072:TsK2sccqDgwpkgCJ473oF6fJGJmMDWuAclkOFSHPVAgLw41f7YzMf14E+k8xXQzd:pbwp4F0JGEMDWu5kHdAgE4d7+bXV8d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 606b0d266a93c33c22bb4cf1eb92f2f0_JaffaCakes118
Files
-
606b0d266a93c33c22bb4cf1eb92f2f0_JaffaCakes118.exe windows:4 windows x86 arch:x86
7a66dbabed6f5f9566c29259f49c0e49
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
IsDBCSLeadByte
CreateProcessInternalA
GetModuleFileNameA
GetModuleHandleW
GetCurrentProcessId
VirtualAlloc
GetCommandLineA
GetLogicalDrives
lstrcatA
lstrcmpA
TlsFree
GetCurrentThread
GetDriveTypeW
GetUserDefaultLangID
GetSystemDefaultLCID
GetCurrentThreadId
GetACP
TlsGetValue
TlsSetValue
GetOEMCP
user32
GetClassLongA
GetWindow
GetSystemMetrics
GetActiveWindow
GetWindowTextA
IsIconic
GetDC
UpdateWindow
GetForegroundWindow
GetWindowTextLengthA
BeginPaint
RegisterClassA
CloseWindow
ShowWindow
GetFocus
GetWindowLongA
IsWindowVisible
GetWindowDC
ReleaseDC
imagehlp
ImageNtHeader
FindFileInPath
BindImage
CheckSumMappedFile
ImageLoad
FindDebugInfoFile
oleacc
LresultFromObject
DllGetClassObject
GetRoleTextA
GetStateTextA
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 600KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ