Static task
static1
Behavioral task
behavioral1
Sample
61c8aa53b6c841f0374d9c5eb9f5672e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
61c8aa53b6c841f0374d9c5eb9f5672e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
61c8aa53b6c841f0374d9c5eb9f5672e_JaffaCakes118
-
Size
27KB
-
MD5
61c8aa53b6c841f0374d9c5eb9f5672e
-
SHA1
7c68965a9d2ad363cf02a444be29e56bf5ce5290
-
SHA256
84193d689e2063d1049b3a7a8847760a061313c1f891f4717fa7ffc473c8a796
-
SHA512
7ba8e07d2980e4a3c43d4f3136c21e7eae52957c81c58ccae4138ff1013fc83c6bd1de37c92349bd6b1f230e1654ca9d2cc120fb097d9f06a2812abe5066dc62
-
SSDEEP
384:l5f0sJ4UFt2ucbKMHdekLR1hPy6eZY9ERhQUqwmEdOMmr5mw6gbq/:l5fRC5FbtdekLRvOZYchHUMmr5P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61c8aa53b6c841f0374d9c5eb9f5672e_JaffaCakes118
Files
-
61c8aa53b6c841f0374d9c5eb9f5672e_JaffaCakes118.exe windows:1 windows x86 arch:x86
8b22e20bd9ce56d933a22ae13230b945
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateWindowExA
LoadIconA
LoadCursorA
RegisterClassA
GetMessageA
DispatchMessageA
DefWindowProcA
SetWindowLongA
gdi32
CreateSolidBrush
kernel32
GetCurrentThread
shlwapi
StrChrA
Sections
.idata Size: 512B - Virtual size: 450B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE