Static task
static1
Behavioral task
behavioral1
Sample
72e9b0bb93112a76891948b42a1cbdae_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
72e9b0bb93112a76891948b42a1cbdae_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
72e9b0bb93112a76891948b42a1cbdae_JaffaCakes118
-
Size
46KB
-
MD5
72e9b0bb93112a76891948b42a1cbdae
-
SHA1
9dbef4534e788ba7dfa7e2b3b70f890946447907
-
SHA256
6d5ab3526f49f26f067be2e4b5fa068f1bb74763a811bd8f9c69648f0802e3ef
-
SHA512
8879fc14661f6bbe327e9097c44ef68cba9dcc4d92d7dfb9dfa27b1682a27b33327601137853499f6e56be2af5040806b9bcd21b108ac4415680257b160f006c
-
SSDEEP
768:AdaCOWbmQR9fU0csMosTDsCKGwhpEUM5lRhYe+IENgcCCJPCl1nhrE+Sax:AhOimQeossCHwhpfM53ChhqCRClph4+T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72e9b0bb93112a76891948b42a1cbdae_JaffaCakes118
Files
-
72e9b0bb93112a76891948b42a1cbdae_JaffaCakes118.exe windows:4 windows x86 arch:x86
67cc0c37d1beb4c7b795d92d2a3f964c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
BeginPaint
CreateWindowExA
DefWindowProcA
DispatchMessageA
EndPaint
FindWindowA
GetMessageA
GetSystemMetrics
LoadCursorA
LoadIconA
MessageBoxA
PostQuitMessage
RegisterClassA
RegisterClassExA
SendMessageA
ShowWindow
TranslateMessage
UpdateWindow
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 560B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ