Static task
static1
Behavioral task
behavioral1
Sample
6926e7b3baa991865c1caf0cec05a8d0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6926e7b3baa991865c1caf0cec05a8d0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6926e7b3baa991865c1caf0cec05a8d0_JaffaCakes118
-
Size
432KB
-
MD5
6926e7b3baa991865c1caf0cec05a8d0
-
SHA1
f8c400416373302e6b2fd4ce9f7b50616e68401f
-
SHA256
8f7bbd03fa9f99c7832895c347630413b7818dfbe4858ad39a9518630a52a5c5
-
SHA512
4ea35e33c9f4de5ed3cde04a0492676b75e84ad3859c3aace60a2666e4396499b334e0badb4af73de8c58b41bb94ccf0369d00370d0a69321ce234018f80a040
-
SSDEEP
12288:6ZTFPRWxwMIsQ+97Sg5mXEp0QcmrQq7s98lbE:6VeuMIsQ+955rQ8s9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6926e7b3baa991865c1caf0cec05a8d0_JaffaCakes118
Files
-
6926e7b3baa991865c1caf0cec05a8d0_JaffaCakes118.exe windows:4 windows x86 arch:x86
d8154def30ef8142b05acd5a08b501b3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDiskFreeSpaceW
GetFileAttributesA
CreateFileA
GetTickCount
ResetEvent
GetLocalTime
ReleaseMutex
FindAtomA
GetTickCount
GetDriveTypeA
LoadLibraryW
CloseHandle
LocalFree
HeapCreate
LoadLibraryA
ReleaseMutex
GetComputerNameW
GetCommandLineW
ExitThread
lstrcpynA
user32
GetClipCursor
GetDlgItem
FillRect
DispatchMessageA
CloseWindow
CreateWindowExA
GetKeyState
GetComboBoxInfo
SetFocus
CallWindowProcA
GetClassInfoA
DrawStateA
DestroyCaret
snmpapi
SnmpTfxClose
SnmpUtilMemFree
SnmpUtilMemAlloc
SnmpTfxOpen
SnmpTfxQuery
appwiz.cpl
ConfigStartMenu
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 420KB - Virtual size: 419KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ