Static task
static1
Behavioral task
behavioral1
Sample
7506ac46e4b554d52a3eea362ff6e67c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7506ac46e4b554d52a3eea362ff6e67c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7506ac46e4b554d52a3eea362ff6e67c_JaffaCakes118
-
Size
384KB
-
MD5
7506ac46e4b554d52a3eea362ff6e67c
-
SHA1
c12b867251055864c02f73a796c4466a2740a262
-
SHA256
56b91c09404d4dce090310c0d2afd5f59e9597136aaec2381f86d063fea78a41
-
SHA512
695269e33a2a2fdcfb12d8cbceae8013193f3a0ab3ca5230a14c96cbb889cc35edef0cab0da85d69daad64e656af35890524b6be45e56601a08fac76993921f2
-
SSDEEP
6144:SbtLZRv55G5ke9MRs0On1SIFs7Bqwtj9kJ8c0IITjZ0N7/cYL9duz4hwOUu808OG:6zR5GdCs0O1BkBqwtjFc0fTjZOT59oz7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7506ac46e4b554d52a3eea362ff6e67c_JaffaCakes118
Files
-
7506ac46e4b554d52a3eea362ff6e67c_JaffaCakes118.exe windows:4 windows x86 arch:x86
faf57c3354f72d38913bc100499411dc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFullPathNameA
LoadLibraryExA
LocalFree
GlobalLock
GetConsoleCP
IsDebuggerPresent
HeapCreate
FindClose
GetLastError
IsBadReadPtr
FreeEnvironmentStringsA
CloseHandle
GetACP
LocalUnlock
CreateFileA
DisconnectNamedPipe
CreateFileMappingA
GetStdHandle
GetModuleHandleA
CreateEventA
user32
DefWindowProcA
CreateDialogParamA
GetDlgItem
DispatchMessageA
ScrollWindow
EmptyClipboard
GetDC
GetMessageA
PostMessageA
SetFocus
GetIconInfo
EndDialog
IsWindow
DrawIconEx
uxtheme
GetThemeMetric
EnableTheming
GetThemeColor
CloseThemeData
DrawThemeIcon
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ