Static task
static1
Behavioral task
behavioral1
Sample
60bbed383eba85ba83ea7c1997f1dd3f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
60bbed383eba85ba83ea7c1997f1dd3f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
60bbed383eba85ba83ea7c1997f1dd3f_JaffaCakes118
-
Size
76KB
-
MD5
60bbed383eba85ba83ea7c1997f1dd3f
-
SHA1
3fb4c574ea239309e83762e6a8d2261cea00d43d
-
SHA256
2e794e5c7343cbd36b8e40768a4ab630b57976bbdf35802cceedc8dccfb4d943
-
SHA512
534d390597bd405fd007209e0fd0585bcf980808625d53500a89620353bf059882e5290f0e6859be4cb7d786fea59d3009e183206c9f5021609d7f07074ab05c
-
SSDEEP
1536:caZr5N5bJjrpXkVjDELHytEybJMnIYWfFkWGq6cjTA:dZrrZXkdILajddkWGqzjTA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60bbed383eba85ba83ea7c1997f1dd3f_JaffaCakes118
Files
-
60bbed383eba85ba83ea7c1997f1dd3f_JaffaCakes118.exe windows:4 windows x86 arch:x86
fdad5176929a777f8cd9f48467f3bbbc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenSemaphoreA
HeapValidate
HeapCompact
CreateTapePartition
GetTimeZoneInformation
GetDevicePowerState
EnumCalendarInfoExA
HeapFree
GetProcessHeap
HeapAlloc
ExitThread
ExitProcess
gdi32
SetPixel
SetROP2
GetLayout
SetLayout
GetDeviceCaps
DeleteObject
LineTo
CreatePen
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
SetDIBitsToDevice
DeleteDC
GetStockObject
MoveToEx
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ