Static task
static1
Behavioral task
behavioral1
Sample
601d4b07341acba9bc17e4a8070ce7f2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
601d4b07341acba9bc17e4a8070ce7f2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
601d4b07341acba9bc17e4a8070ce7f2_JaffaCakes118
-
Size
106KB
-
MD5
601d4b07341acba9bc17e4a8070ce7f2
-
SHA1
da31cbea1c44d1170b27c899ca01079e72adb333
-
SHA256
4fe74594cd9d700b999531fbaf7f0293760a45ffeb39e533d52c5fa12ae7c660
-
SHA512
f24ba3ef292c046d68bfacd37357dee98310871acca32ee138931e1ca36426c876599ace361f467ae5189494d9ed4b2c05000275022b0b6e0507a30484e688d9
-
SSDEEP
3072:qRAofdHThnjvX/l3fjxZnHNZrBJt7b10qkdDEl:cfdHVztbtZ9JtHKC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 601d4b07341acba9bc17e4a8070ce7f2_JaffaCakes118
Files
-
601d4b07341acba9bc17e4a8070ce7f2_JaffaCakes118.exe windows:0 windows x86 arch:x86
b1c897305f052911af2d0fb5223b0fbe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SleepEx
LocalFree
ExpandEnvironmentStringsA
GetStartupInfoA
OpenEventW
FileTimeToDosDateTime
SystemTimeToFileTime
GetProcAddress
CompareStringA
CopyFileExA
WaitForMultipleObjects
ExpandEnvironmentStringsW
CreateDirectoryA
GetCurrentDirectoryW
OpenEventA
GetFileAttributesA
GetTempPathA
GetTempFileNameA
GetVolumeInformationA
GetEnvironmentVariableW
RemoveDirectoryW
GetVersionExW
lstrcmpiW
GetDateFormatW
lstrcmpW
GetShortPathNameA
lstrlenW
WaitForSingleObject
user32
GetKeyboardLayout
UnregisterClassW
GetWindowRgn
GetCursorPos
GetSubMenu
ReleaseDC
SendMessageW
SetForegroundWindow
gdi32
CreateBitmap
TextOutA
TextOutW
GetObjectA
SetBkMode
advapi32
RegDeleteValueA
comdlg32
PrintDlgExW
GetSaveFileNameA
PageSetupDlgA
GetOpenFileNameW
shell32
ShellExecuteW
ole32
CoGetCurrentProcess
CoFreeLibrary
OleInitialize
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 168B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ