Static task
static1
Behavioral task
behavioral1
Sample
6f1bac58d4d6bf20e9431647345c72fa_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6f1bac58d4d6bf20e9431647345c72fa_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6f1bac58d4d6bf20e9431647345c72fa_JaffaCakes118
-
Size
132KB
-
MD5
6f1bac58d4d6bf20e9431647345c72fa
-
SHA1
98672f34d105d81eea02d1ce0ce4e3d08d75350e
-
SHA256
c3c2b4220dfe9a44fc29f989cb31166d0a4bbc908587d64fccaa829508fa85d3
-
SHA512
706cbf726acc182ea2b894f64742d341dc4e027479e06ad88abd19ee67459fb89344ebcdaa531b1e7ceb376fd59b1f9c8223d4add6260f26794d844d9f27e49f
-
SSDEEP
3072:raPt40TjhIg+eSPdSLBMBmeRJyYGG8PqxkLB5h:rcnhIj4deRJy3G8quF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f1bac58d4d6bf20e9431647345c72fa_JaffaCakes118
Files
-
6f1bac58d4d6bf20e9431647345c72fa_JaffaCakes118.exe windows:4 windows x86 arch:x86
4d3ac168efa823fea195455d97d25ba7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringW
DeleteFileW
DisableThreadLibraryCalls
ExitProcess
GetExitCodeThread
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetThreadLocale
GlobalAlloc
GlobalHandle
IsDebuggerPresent
LoadLibraryA
LoadLibraryExA
VirtualAlloc
VirtualFree
user32
CreatePopupMenu
EndDialog
EndPaint
GetClassInfoA
GetSubMenu
IsWindow
IsWindowEnabled
MessageBoxA
RegisterClassA
SetWindowPos
SetWindowTextA
TranslateMessage
gdi32
CreateFontIndirectA
CreateRectRgn
GetDCOrgEx
SetEnhMetaFileBits
TextOutA
shell32
CommandLineToArgvW
DoEnvironmentSubstW
ExtractIconA
SHGetFolderPathW
Shell_NotifyIconA
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ