Static task
static1
Behavioral task
behavioral1
Sample
761685f3f3ab341a77162c968dfc8800_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
761685f3f3ab341a77162c968dfc8800_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
761685f3f3ab341a77162c968dfc8800_JaffaCakes118
-
Size
30KB
-
MD5
761685f3f3ab341a77162c968dfc8800
-
SHA1
b2d7c31b004054ac32173e82223e03f4fab2fe56
-
SHA256
a39d15088feaf310f56d3e87502d3e816477466d4ca374d94a0931acdfa1840a
-
SHA512
97920d2bc2eda11d24b1755ed69e01475e5c0169146fbf12ee1eb8d1f02c5598691e9a31f8ebcc22f5b4fbec25d7e760934645aa6a762ef92d22b13497e653ba
-
SSDEEP
768:rfiBLKn2x1hdNB8G4rdFqEzniUggZOhOdOrNNtkKsf+0E5h+Fg+vE+1E1xaHrG:rfiBLK2xT4r7HiUuhFPkKldh+m+vT1El
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 761685f3f3ab341a77162c968dfc8800_JaffaCakes118
Files
-
761685f3f3ab341a77162c968dfc8800_JaffaCakes118.exe windows:4 windows x86 arch:x86
12f3796fd5ccd2dac14e4721adbb64a2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcessId
ntdll
RtlExtendedIntegerMultiply
RtlDeregisterWaitEx
user32
ExcludeUpdateRgn
advapi32
RegSaveKeyExA
gdi32
GdiAlphaBlend
SetTextCharacterExtra
SetStretchBltMode
CancelDC
SetPolyFillMode
RoundRect
PtInRegion
LineTo
GetGraphicsMode
ExtFloodFill
EnumFontsA
SetRectRgn
CreatePatternBrush
CreateCompatibleBitmap
appmgmts
CsEnumApps
oleaut32
SafeArrayRedim
shell32
SHChangeNotification_Lock
iashlpr
MemFreeIas
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 1006B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ