Static task
static1
Behavioral task
behavioral1
Sample
727520c8f04a777db94c7876cc04de7c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
727520c8f04a777db94c7876cc04de7c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
727520c8f04a777db94c7876cc04de7c_JaffaCakes118
-
Size
82KB
-
MD5
727520c8f04a777db94c7876cc04de7c
-
SHA1
1c9f81f6d26053223be4a3d71c1ad897fb57c270
-
SHA256
474e32a6bbc8465308f5c0d5caa22b1f7adfc598cbab2af32f8c5a2e77d2b334
-
SHA512
79da400aab69539efb157104afd2389886b9da92e16aaa10d99d30152bf07dae335b857cfe0ce682c05919d374afd9b0099fb5dcac59fff581a70337a07d760a
-
SSDEEP
1536:yT4Pwr7hfjH0xX1SpkFjA4gU5q4xqV0GCc/bkRA/UO9Owpf0utnDSg:ysiFfjslxFjA16q8intpJ0cnDSg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 727520c8f04a777db94c7876cc04de7c_JaffaCakes118
Files
-
727520c8f04a777db94c7876cc04de7c_JaffaCakes118.exe windows:4 windows x86 arch:x86
1f64d00417c0239b5ee4e676306bf43a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CloseEnhMetaFile
CreateRoundRectRgn
DPtoLP
DeleteDC
EndDoc
EnumICMProfilesA
kernel32
MulDiv
SetupComm
IsBadWritePtr
GetConsoleMode
LocalFree
HeapSummary
user32
CopyRect
CallMsgFilterA
AdjustWindowRect
CreateIcon
Sections
.text Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE