Static task
static1
Behavioral task
behavioral1
Sample
73c14ef26628bedee0801f506cf2850e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
73c14ef26628bedee0801f506cf2850e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
73c14ef26628bedee0801f506cf2850e_JaffaCakes118
-
Size
391KB
-
MD5
73c14ef26628bedee0801f506cf2850e
-
SHA1
46af6e74e0f1fa8eaaaef445cc651a59f4b89da7
-
SHA256
eb9e1de73d0a7b5dae20aa611521bde86c1e1a7691a03e340b99bf383ba28931
-
SHA512
3afcd77a2cc7418332e7503bd33aa3d50de85980e9b714287f34d87a4d9e09593bdadb00adb3a7c53de91d8d5d8a4ff6073e3dbcf001e4fd8bb8eae9f00bacd9
-
SSDEEP
6144:NMDoEUBtbpIHhUweNwYWb2ja4qQxOe10QWWh7PXC8tUEuc9Q4SKwvA:OuDCFVX2ja4qQxX7PSEhOKwvA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73c14ef26628bedee0801f506cf2850e_JaffaCakes118
Files
-
73c14ef26628bedee0801f506cf2850e_JaffaCakes118.exe windows:29634 windows x86 arch:x86
aaadffe438200b58cb25ee122abae2e1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ScreenToClient
DefWindowProcW
SetForegroundWindow
GetDlgCtrlID
GetWindowRect
CheckDlgButton
kernel32
GetLastError
GetVersionExA
VirtualAlloc
CloseHandle
LocalAlloc
GetCommandLineA
LoadLibraryW
DeleteCriticalSection
ExitProcess
VirtualFree
gdi32
SelectObject
GetObjectW
CreateCompatibleDC
ExtTextOutW
GetDeviceCaps
StretchBlt
SetBkColor
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 372KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ