Static task
static1
Behavioral task
behavioral1
Sample
747b6eb71eb50c72e62422f013f8f114_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
747b6eb71eb50c72e62422f013f8f114_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
747b6eb71eb50c72e62422f013f8f114_JaffaCakes118
-
Size
9KB
-
MD5
747b6eb71eb50c72e62422f013f8f114
-
SHA1
cf4dbe29b87c30263b2fbce6045802d037f80219
-
SHA256
59b67e19a0c8fbde1cb42d1d29d995bea87bd52ea0a00377e615c04df0f3bb2f
-
SHA512
f22cb6322b5e55bb4f85a89b6758aa84dfbf377dd95502a6c66dd44e1910d39019c121dae69671deac09cedcd8534a4b2ec38830d1d0295bee531c4497941373
-
SSDEEP
96:eYCUk7d17vKnZWOjfm+IMrbBbeeBZktKqsu03NP25L//sxb+D6Vo7mHp/Ns8AfB:rkPIxjfm+5bBx+6P3NP2dJmVa0/m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 747b6eb71eb50c72e62422f013f8f114_JaffaCakes118
Files
-
747b6eb71eb50c72e62422f013f8f114_JaffaCakes118.exe windows:4 windows x86 arch:x86
11c04389c381dd926fac64f8ec709a16
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SendMessageA
SetWindowLongA
LoadCursorA
UpdateWindow
RegisterClassExA
PostQuitMessage
MessageBoxA
LoadIconA
SetFocus
GetSystemMetrics
GetSysColor
GetMessageA
GetClientRect
EndPaint
DispatchMessageA
DefWindowProcA
CreateWindowExA
CallWindowProcA
ShowWindow
BeginPaint
TranslateMessage
kernel32
lstrlenA
lstrcatA
WinExec
SetCurrentDirectoryA
GetModuleHandleA
GetCurrentDirectoryA
GetCommandLineA
ExitProcess
gdi32
SelectObject
MoveToEx
LineTo
DeleteObject
CreatePen
shell32
ShellAboutA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 1012B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 37B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE