Static task
static1
Behavioral task
behavioral1
Sample
6005310a55583b3dfda35d442355d547_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6005310a55583b3dfda35d442355d547_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
6005310a55583b3dfda35d442355d547_JaffaCakes118
-
Size
23KB
-
MD5
6005310a55583b3dfda35d442355d547
-
SHA1
b7f71a5f4a128758b4f9280b0194b132546243fe
-
SHA256
4cf477031a0a6bc10902572ba8149cd7e654da314851fccb3b45357ab93be346
-
SHA512
287a6d4fc857b398b270cb908f3d8a9e66d98a44ea1f2d6f66d4b4c74a0960c95509cda95f9a57cdbbe87599b92bbac398b7e616c9d726e4e2c3685c25c10f42
-
SSDEEP
384:0gaVdiwPrBZUzAxYVdHsXgNEXw2iHQ9qup1TRL:CVdvDnUzAxGHsBXwtHiqK1l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6005310a55583b3dfda35d442355d547_JaffaCakes118
Files
-
6005310a55583b3dfda35d442355d547_JaffaCakes118.exe windows:1 windows x86 arch:x86
c199db4ba75909fca95a913e772b0311
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateJobObjectA
FreeEnvironmentStringsA
SetLocaleInfoA
GetPrivateProfileSectionNamesA
GetProfileIntW
EnumCalendarInfoExA
GetEnvironmentStringsA
user32
EnumDisplaySettingsExW
LoadKeyboardLayoutW
DdeCreateStringHandleA
SetClassLongA
WinHelpA
GetKeyboardLayoutNameA
DialogBoxParamW
CharPrevA
DefMDIChildProcW
GetDlgItemTextW
gdi32
CopyEnhMetaFileW
CreateEnhMetaFileW
CreateFontA
GetCharWidthA
CreateFontIndirectA
AddFontResourceExW
CreateMetaFileA
GetEnhMetaFileDescriptionA
Sections
.code Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.icode Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1024B - Virtual size: 850B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ