Static task
static1
Behavioral task
behavioral1
Sample
69ef1b9f01fa04c1bf65185223408a3b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
69ef1b9f01fa04c1bf65185223408a3b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
69ef1b9f01fa04c1bf65185223408a3b_JaffaCakes118
-
Size
20KB
-
MD5
69ef1b9f01fa04c1bf65185223408a3b
-
SHA1
f628582ab21c0ccfeeb0c0842fc38268c2c12afd
-
SHA256
a3df347a083e5d3e6fb13ff6069647cb4f2c3638a17613d1014cbc9b0b8257dd
-
SHA512
f8ef6ea2eb9c235d8d902169e02ddb37199054cef4cbe2c7284514c4799c4377d87dd42fae1a2fb51b316d01db430509107976c47b46117676c232cb38e82e9e
-
SSDEEP
384:5RhMW5O/4dibYyNDfTyZqnFbMRfE6DbtbhignT6wuWzAA:5RiwO/6iPZTmq1M5DbttigpKA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69ef1b9f01fa04c1bf65185223408a3b_JaffaCakes118
Files
-
69ef1b9f01fa04c1bf65185223408a3b_JaffaCakes118.exe windows:4 windows x86 arch:x86
7749e00484e76ff5549712aec317347c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetSystemInfo
GetVersionExA
LocalAlloc
Sleep
ExitProcess
user32
BeginPaint
BlockInput
CharLowerA
CharUpperA
CloseWindowStation
CreateDialogParamA
CreateWindowExA
DefWindowProcA
DispatchMessageA
EndDialog
EndPaint
FindWindowA
FlashWindow
GetAsyncKeyState
GetClassInfoExA
GetProcessWindowStation
GetTopWindow
MessageBoxA
OpenWindowStationA
RegisterWindowMessageA
SetDlgItemInt
SetFocus
SetWindowTextA
ShowWindow
TranslateMessage
UpdateWindow
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ