Static task
static1
Behavioral task
behavioral1
Sample
7173335a8f713817680ecb8ae2601ac1_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7173335a8f713817680ecb8ae2601ac1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7173335a8f713817680ecb8ae2601ac1_JaffaCakes118
-
Size
25KB
-
MD5
7173335a8f713817680ecb8ae2601ac1
-
SHA1
8e9ddb049edda19ff4bb7391b82aeaf3bb30bdc8
-
SHA256
7adad093f49337a3515a512db3312447db4d526a6b937ddfdd7a6ce398ab8c96
-
SHA512
b6dadd3b0fbdc2e1a125e3d33cfdbd9c76b53e0c11689ce56760bca3d59c9ecb417162411de60484e0769868f0e29cb83176234bc57f47b8e76c93d0cf9d1cf9
-
SSDEEP
384:+JgLk6LxKcDdi2O/A4O0coSL742A+HDrllDBBrXrKJaBG7:+JgNBM2O/S0cr42nHDDDBBGaM7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7173335a8f713817680ecb8ae2601ac1_JaffaCakes118
Files
-
7173335a8f713817680ecb8ae2601ac1_JaffaCakes118.exe windows:4 windows x86 arch:x86
72aa93847b4c9a0474065ae6d20969a8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsDebuggerPresent
VerifyConsoleIoHandle
QueryDosDeviceW
CompareFileTime
FindAtomW
GetDiskFreeSpaceA
TerminateThread
EnumCalendarInfoExW
EnumTimeFormatsA
SetConsoleActiveScreenBuffer
ReadConsoleInputExW
PrivMoveFileIdentityW
LZSeek
user32
GetCursorInfo
GetMenuItemInfoW
MessageBoxTimeoutA
CountClipboardFormats
TranslateAcceleratorW
SwitchDesktop
GetMenuItemInfoW
CreateSystemThreads
VkKeyScanExA
GetClassNameA
ImpersonateDdeClientWindow
InsertMenuItemW
Sections
.text Size: 22KB - Virtual size: 24KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ