Static task
static1
Behavioral task
behavioral1
Sample
6582c7e2817a88cf5bad734d6c7fd3e8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6582c7e2817a88cf5bad734d6c7fd3e8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6582c7e2817a88cf5bad734d6c7fd3e8_JaffaCakes118
-
Size
119KB
-
MD5
6582c7e2817a88cf5bad734d6c7fd3e8
-
SHA1
e178bdc04c3af68193c8547568e2239f2e52addd
-
SHA256
560aa252b23a75c829929f23a40c8a2f1918922c410fd2fcdbdd1cb35cf3bdd3
-
SHA512
7ef88fcd6c0ee95dbdccedd8fefba7688c8bc3d216e8f9bd3fc11f56fae6b5fd7fb2376947b824c8ba86817fc4210ccbb0251f3109b4fe36ab1615c820dde2ab
-
SSDEEP
3072:Subw23QLJzNR/ZmJIxG03YWSAtC1AEHF3XCW:SzRRmJgoAtcl3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6582c7e2817a88cf5bad734d6c7fd3e8_JaffaCakes118
Files
-
6582c7e2817a88cf5bad734d6c7fd3e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
249b0d5016492a44b0bf2b5af11393db
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
DrawStatusTextW
DllInstall
ImageList_GetImageRect
ImageList_SetFilter
ImageList_DrawEx
InitializeFlatSB
kernel32
GetCommandLineA
ExitProcess
CloseHandle
CreateFileA
CreateThread
Sections
.text Size: 69KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE