Static task
static1
Behavioral task
behavioral1
Sample
72f709e46825b7d3aec121b8bd1885fc_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
72f709e46825b7d3aec121b8bd1885fc_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
72f709e46825b7d3aec121b8bd1885fc_JaffaCakes118
-
Size
286KB
-
MD5
72f709e46825b7d3aec121b8bd1885fc
-
SHA1
6d1c64c213a79220d0b805b6e96ef1260db4256b
-
SHA256
1f7819de875138b9e898af72d7af1261b998e04ee175d174ada6420e0db636b3
-
SHA512
04ce41b96b5a677bc791c3c228549dd24fccc4a380fbf6cae679281a0b74464fa680c2d799b639dd8c49070909e1c3b80545ed7ea51e60abce463c142179d0e2
-
SSDEEP
6144:IjrYK6sMRDXy1EoGwU9PWGvdx6S/ndLiUX+afjOti29OEAqAYJkwDssNx:IfYzRuUxJvdcyLi++aOtZMxkLDsC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72f709e46825b7d3aec121b8bd1885fc_JaffaCakes118
Files
-
72f709e46825b7d3aec121b8bd1885fc_JaffaCakes118.exe windows:4 windows x86 arch:x86
2c56702c3f3efc9a7a56de4ba4e0dbe1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
kernel32
LoadLibraryW
ReleaseMutex
GlobalFindAtomW
GetCurrentDirectoryW
FreeLibrary
GetSystemInfo
CopyFileW
GetModuleHandleA
GetModuleHandleW
WaitForSingleObject
LocalFree
GetPrivateProfileStringW
HeapFree
GetCurrentProcessId
GetProcessHeap
LoadLibraryExA
EnumResourceLanguagesA
GetWindowsDirectoryA
lstrcmpiW
GetPrivateProfileIntW
WritePrivateProfileStringW
GetProcAddress
lstrlenA
ExpandEnvironmentStringsW
CreateMutexW
FormatMessageW
FindFirstFileW
SetFileAttributesW
LoadLibraryExW
HeapAlloc
FindClose
GetSystemDirectoryW
FindNextFileW
GetCurrentProcess
rpcrt4
UuidCreate
shlwapi
GetAcceptLanguagesA
PathAppendW
PathIsRelativeW
PathFindExtensionW
UrlUnescapeW
PathRemoveFileSpecW
PathCreateFromUrlW
UrlCreateFromPathW
StrCmpIW
PathCombineW
Sections
.text Size: 146KB - Virtual size: 273KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ