Static task
static1
Behavioral task
behavioral1
Sample
6760d00c7bf5b33b4f1e6af64b66708c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6760d00c7bf5b33b4f1e6af64b66708c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6760d00c7bf5b33b4f1e6af64b66708c_JaffaCakes118
-
Size
331KB
-
MD5
6760d00c7bf5b33b4f1e6af64b66708c
-
SHA1
2a02e917cf10a07c794e35724252d8dc28d58241
-
SHA256
5676aeb16cc83d8a41b1803a72d71942a4be8de170e8955ea907d0bb24fa2bef
-
SHA512
86ef1c103976d199fb71bd78e2858e5423da9e4cb847a9b58d0dcb7e9c919b1af043a24cc8851807754744ea5fbc14b8754403d040152fca8aea6e976672e413
-
SSDEEP
6144:lZHqxt42pyfRMV7UZqb4Dg6aAsx29W51AQabxTmlIgs0q+LyXA:Gxt4+yOV7UZTDCAs4dXslIgs0qtw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6760d00c7bf5b33b4f1e6af64b66708c_JaffaCakes118
Files
-
6760d00c7bf5b33b4f1e6af64b66708c_JaffaCakes118.exe windows:4 windows x86 arch:x86
c7a49dd1e304319e708764302c53486b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetSysColors
ChildWindowFromPointEx
EnumThreadWindows
SendDlgItemMessageA
OpenIcon
CreateDialogIndirectParamA
AdjustWindowRectEx
SetWindowPos
FindWindowA
GetWindowPlacement
ole32
CreateClassMoniker
OleGetAutoConvert
CoTaskMemFree
OleSetAutoConvert
CoGetPSClsid
CLSIDFromString
MkParseDisplayName
CoAddRefServerProcess
CoRegisterClassObject
StgOpenPropStg
OleQueryLinkFromData
OleCreateStaticFromData
OleGetClipboard
kernel32
VirtualLock
GetModuleHandleA
VirtualAlloc
ReleaseSemaphore
CreateSemaphoreA
OpenSemaphoreA
GetProcAddress
VirtualUnlock
GetOverlappedResult
GlobalSize
GlobalAlloc
GetACP
GetStartupInfoA
GetOEMCP
GetTimeFormatA
LocalUnlock
HeapCreate
IsValidCodePage
msvcrt
__getmainargs
exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_acmdln
_XcptFilter
_exit
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 314KB - Virtual size: 314KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ