Static task
static1
Behavioral task
behavioral1
Sample
756317d894dbdabb01c61a6ae0ca6c2d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
756317d894dbdabb01c61a6ae0ca6c2d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
756317d894dbdabb01c61a6ae0ca6c2d_JaffaCakes118
-
Size
58KB
-
MD5
756317d894dbdabb01c61a6ae0ca6c2d
-
SHA1
b931c1f53f59b2178c8db8bea64f1a33e23bbf4d
-
SHA256
40d2d75baa1d6a0ae8709dc8921c0d3ade28b4fae9d8ffbf87fb9d22bcacab33
-
SHA512
06d5c33e719c9ee7b0bf06419d6d4a04bd7e241c40b71f643c6892424cb4e0ba534a335097f7a14fd0fef30e1f364ccf86819756b6c66c128f8e7e15b7e465a6
-
SSDEEP
768:zOPZAkFh8Of1vHQncBKCI+myR3GcdbcPHsCuiPcqu/GYxUdZFd7H8jkxPcDsNVMV:utHQcBKXyRZ24+Y21BH8jkxEA73NNwX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 756317d894dbdabb01c61a6ae0ca6c2d_JaffaCakes118
Files
-
756317d894dbdabb01c61a6ae0ca6c2d_JaffaCakes118.exe windows:5 windows x86 arch:x86
50c0d78bc5d9bf0ea78187237f8857ac
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetCloseHandle
kernel32
GetModuleHandleA
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
user32
GetAsyncKeyState
MessageBoxA
advapi32
RegCloseKey
msvcr90
srand
Sections
.text Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data0 Size: - Virtual size: 800B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.data2 Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ