Static task
static1
Behavioral task
behavioral1
Sample
75e7eed798127b6ff4f825f896634642_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
75e7eed798127b6ff4f825f896634642_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
75e7eed798127b6ff4f825f896634642_JaffaCakes118
-
Size
117KB
-
MD5
75e7eed798127b6ff4f825f896634642
-
SHA1
eaa2106e315f60c836a7880815f79a893936e3e2
-
SHA256
cb94bbd8da7f7b379505697cf12e6c890225c971eaeaf1e82c701bccfd17b718
-
SHA512
cacdfb41fa82e758049bd12b50b1ccbb1c6d6a026a5c3036b121769222e9d905dcecf69ae133efa475289681f4690ab466fa4c3a9a2464661aa2376778fe731e
-
SSDEEP
1536:FUbt9TQmJAO/2zFDsedr3ZwBmKGcbShm5Mv0SsLMRkXNvWW29n:FzmOO/WsW3+Bm4SU2jTRSvB29
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75e7eed798127b6ff4f825f896634642_JaffaCakes118
Files
-
75e7eed798127b6ff4f825f896634642_JaffaCakes118.exe windows:4 windows x86 arch:x86
06659b7c132e36068b994fd289faec2e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
GetDiskFreeSpaceA
CloseHandle
SearchPathA
CreateThread
SetEvent
FindResourceExA
GetTickCount
FindVolumeClose
GetModuleHandleA
ExitProcess
FindAtomA
TlsGetValue
ReleaseMutex
GetCalendarInfoA
DeleteCriticalSection
lstrlenA
GetLastError
Sleep
FindClose
user32
EnableWindow
IsIconic
GetMessageA
GetScrollBarInfo
CloseWindow
GetUpdateRect
GetKeyState
DispatchMessageA
DialogBoxParamA
CreateMenu
EndDialog
DragDetect
CreateWindowExA
CopyImage
msdmo
DMORegister
DMOEnum
DMOUnregister
DMOGetTypes
DMOGetName
advapi32
RegCloseKey
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE