Static task
static1
Behavioral task
behavioral1
Sample
721ce465a8cc6c9e88569d6384a49ad1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
721ce465a8cc6c9e88569d6384a49ad1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
721ce465a8cc6c9e88569d6384a49ad1_JaffaCakes118
-
Size
40KB
-
MD5
721ce465a8cc6c9e88569d6384a49ad1
-
SHA1
73f3cd3e44740c35940fbd4a0c86ece6c1eafc95
-
SHA256
4e064c044ffdbeb8045968bdc711c5094f664c5ef5f0d269b502256132fa0803
-
SHA512
b13d0d83360782cf03832bd133e66a1567d536b9190788436f356bd872a5e97e45a953d99541de2fbcf9d79316b0098e45e2a442f26ff2368fb04919d04d9817
-
SSDEEP
768:FiT6mvsURYHV2MwvzmgO2cpnwodEr2WQQU:UT6mvsURgV2M87O2Vod5F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 721ce465a8cc6c9e88569d6384a49ad1_JaffaCakes118
Files
-
721ce465a8cc6c9e88569d6384a49ad1_JaffaCakes118.exe windows:4 windows x86 arch:x86
4b23b38cba768a96c68b0663113ae389
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringA
ExitThread
GetLastError
GetPrivateProfileStringA
GetStartupInfoA
GetSystemTime
GetTimeFormatA
GetVersion
InitializeCriticalSection
RaiseException
RtlUnwind
SetCurrentDirectoryA
SetEndOfFile
SetLastError
TlsSetValue
VirtualAlloc
lstrcatA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA
user32
ActivateKeyboardLayout
BeginPaint
ChangeMenuA
CharToOemBuffA
CopyRect
CreatePopupMenu
DestroyIcon
DestroyMenu
DestroyWindow
DialogBoxParamA
DrawIcon
DrawMenuBar
EnableWindow
EndDialog
EndMenu
GetDlgItem
GetFocus
IsCharLowerA
IsCharUpperA
LoadAcceleratorsW
SetCursor
Sections
.text Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
code Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE