Static task
static1
Behavioral task
behavioral1
Sample
613237eda1fb4e596b22904f113b786c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
613237eda1fb4e596b22904f113b786c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
613237eda1fb4e596b22904f113b786c_JaffaCakes118
-
Size
109KB
-
MD5
613237eda1fb4e596b22904f113b786c
-
SHA1
cc2b3a1252e47737410b6dbab0d720eda9e439aa
-
SHA256
b3fe8686de8a50ac96d2e0e3d755918e1f37841aa742192776b51a3834282819
-
SHA512
79d5b263e663f485b4eaf14e46fe428089e92078e8b847365a27a032cbd1b8e1df58575ca478ddbca0862e3118500b08fa2c6f8852fa77fdab29a04d8fc4efb2
-
SSDEEP
1536:99yfH9rJa6RUu0xT4YxbfdaiWq6m6+W9z3kcz3TYvPfPEBqjURDoq4OZZZLlCIib:Pyv9NTeSyFaLqrWZUQufPMRD68wb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 613237eda1fb4e596b22904f113b786c_JaffaCakes118
Files
-
613237eda1fb4e596b22904f113b786c_JaffaCakes118.exe windows:4 windows x86 arch:x86
5c4ce3a19c468f8f74687f88a333caf5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExA
RegOpenKeyExW
comctl32
CreateToolbar
ImageList_DrawEx
ImageList_Destroy
gdi32
CreatePenIndirect
SetTextColor
user32
CreateIcon
GetCursor
GetFocus
CloseWindow
LoadMenuA
CopyImage
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 41B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 493B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ