Static task
static1
Behavioral task
behavioral1
Sample
66193f9ff9de6f81921b02d33cb140f6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
66193f9ff9de6f81921b02d33cb140f6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
66193f9ff9de6f81921b02d33cb140f6_JaffaCakes118
-
Size
108KB
-
MD5
66193f9ff9de6f81921b02d33cb140f6
-
SHA1
0c287435f1e8eae6f38e9f8e2ce8148521bb2335
-
SHA256
3bcc16b373418a8c4dc5c612cfd81cf76d9eb023ff3cbbb6d4b571b172ae452a
-
SHA512
b6e044e875b199e90be0e9b60ecab540b5e176366fec2ef7afe18e16225bab93969e72d22a1979f65af710d4ace651abe99371935f16af28a506de0a7ff25758
-
SSDEEP
1536:1jpisUVA8Itd42vRxh1FvVzXYiM3A6qNglt8cX4K4s6ODaFCwnKFHSCYMNUz:1NuLItOcdHuATsN6QaMwnLCY6Uz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66193f9ff9de6f81921b02d33cb140f6_JaffaCakes118
Files
-
66193f9ff9de6f81921b02d33cb140f6_JaffaCakes118.exe windows:4 windows x86 arch:x86
d63a109e586ffcd3b0c9884f37b47200
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
GetModuleHandleA
LoadLibraryA
user32
CloseClipboard
BeginPaint
FillRect
ReleaseDC
OpenClipboard
DestroyWindow
gdi32
CreateDCA
oleaut32
SafeArrayCreate
msvcrt
__getmainargs
_controlfp
_except_handler3
__set_app_type
strcmp
free
malloc
_exit
__p__fmode
exit
_acmdln
_XcptFilter
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
Sections
.text Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 818B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE