Static task
static1
Behavioral task
behavioral1
Sample
7595d0bac4220b60aebf7944692369f5_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
7595d0bac4220b60aebf7944692369f5_JaffaCakes118
-
Size
312KB
-
MD5
7595d0bac4220b60aebf7944692369f5
-
SHA1
6544ee76829de523783f6eb913e4e963688f9ac9
-
SHA256
d2b301bd87735e1e900133de2303d4cf8e7dcd781cbdb85c5327b36f30043f68
-
SHA512
892fe016af8e2ac97126fd5efb204d39aa3d17c889f48c4ee6d31b3d67a6e9440b3b9bc5c8d3b618f83ab8174978debf11d8ad13e3dc6639f1b3e675d2e008c6
-
SSDEEP
6144:icTRLFhpIY/houf4qLAdlwzsT8pdUNhcxckiWZe6YB3W2viZsSQ7:/lxhikhoS4qL6iwTayNhcwaSBGZmS6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7595d0bac4220b60aebf7944692369f5_JaffaCakes118
Files
-
7595d0bac4220b60aebf7944692369f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
7fed0f793011780c0b19725bc2dc7364
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindAtomA
GetProfileStringA
GlobalFree
GlobalFlags
GetModuleHandleA
GlobalLock
CloseHandle
FormatMessageA
CreateJobSet
ClearCommBreak
GetOEMCP
GetUserDefaultLangID
ExitProcess
VirtualAlloc
GetTapeStatus
GetVolumePathNameA
GetCommState
EnterCriticalSection
GetProcessHeap
GetStdHandle
CreateHardLinkA
user32
GetParent
EndPaint
ShowWindow
GetWindowTextA
GetActiveWindow
ValidateRect
GetWindowTextLengthA
GetForegroundWindow
RegisterClassA
GetDC
IsIconic
DrawEdge
ReleaseDC
GetWindow
GetClassNameA
GetFocus
CloseWindow
BeginPaint
GetClassInfoExA
gdi32
GetColorSpace
CreateDIBitmap
CreateDCA
GetCharWidthA
CombineRgn
lpk
LpkInitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ