Static task
static1
Behavioral task
behavioral1
Sample
61d07da23ecaa95291244114abf605af_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
61d07da23ecaa95291244114abf605af_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
61d07da23ecaa95291244114abf605af_JaffaCakes118
-
Size
420KB
-
MD5
61d07da23ecaa95291244114abf605af
-
SHA1
7845bd532dac1fa04b53d6beda4c694c6cc8dcb3
-
SHA256
fda299443f749d6fef752cec8ce884d3babed56ac5ea63094c3acb1a12899d08
-
SHA512
744583f4e1f1f46f58e171cd8cb8c2c2c945042755de0301a827c062b85e6ece815875773fbff71bc22b180331bfc10f6c68c43bba1e5d1dbf2bccc233b8b685
-
SSDEEP
6144:iJlnLiSfOqz3uU7tYcFYL0NtSGPl26iya/iO5AmT8O2u7Oe03mijeX+3KwQz:iJhGO3X7tYcttSMllsH516+y1jeYKwA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61d07da23ecaa95291244114abf605af_JaffaCakes118
Files
-
61d07da23ecaa95291244114abf605af_JaffaCakes118.exe windows:5 windows x86 arch:x86
240890a13eaae031279b53a7c8064a56
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathCombineA
PathAddExtensionA
kernel32
LoadLibraryA
VirtualProtect
CreateFileA
ExitProcess
GetProcAddress
VirtualFree
VirtualAlloc
user32
GetMessageA
GetForegroundWindow
TranslateMessage
DialogBoxParamA
Sections
.text Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 412KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ