Static task
static1
Behavioral task
behavioral1
Sample
7669fafeea356a40ef2327f28b70630c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7669fafeea356a40ef2327f28b70630c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7669fafeea356a40ef2327f28b70630c_JaffaCakes118
-
Size
2.7MB
-
MD5
7669fafeea356a40ef2327f28b70630c
-
SHA1
4aa1dace393a9a9391deed7e6317c0482cc402a7
-
SHA256
ede81905aa6d1c1866ac1b30d297c50f9e9906a64b8be17a3c3da6e5a9bfdd59
-
SHA512
50483a5d3e720b9844562b6958c59a059db4e19eab32647fd355d8f43d7728399f4fd4158abf18604ca1d1a00d4f4f3726de616af02a23c7b9101ab4d6c34981
-
SSDEEP
49152:XTWCtHlILjSIP9j/pIwBArGxGqy3sLNtLavzx7zGEgr++TICXl:XCCBlIL2IP9j/WWA2Gq7jLAz5GEq++TR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7669fafeea356a40ef2327f28b70630c_JaffaCakes118
Files
-
7669fafeea356a40ef2327f28b70630c_JaffaCakes118.exe windows:4 windows x86 arch:x86
de39dc68941cc6307e3b2590c857a907
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
user32
wsprintfA
advapi32
RegCloseKey
ole32
OleRun
Sections
.text Size: 1.1MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 56KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 68KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE