Static task
static1
Behavioral task
behavioral1
Sample
7695a4fd87188d250a376ccc14c273d8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7695a4fd87188d250a376ccc14c273d8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7695a4fd87188d250a376ccc14c273d8_JaffaCakes118
-
Size
150KB
-
MD5
7695a4fd87188d250a376ccc14c273d8
-
SHA1
7e75f4c07d04ba39d596395e4a6f8f24a26ab0cc
-
SHA256
3f8ecc1da2da44e81c4d93fc300951a9a82dde499b8e58b01db035a8eff18540
-
SHA512
cc13e72be74e53e02a8022ce362005e3b13763e799718177674466d9a96e3cb173c199d3cbc26283657d7f868ae49fddaef552e4797111481c98d10f3b58e9aa
-
SSDEEP
3072:9fowx5tv67tZQwyDY/Krg6wG4jyTVTZ7Cx7Q5035lWTJsZOoB2:1x5xOHbyTmG8ypFCBg07WTWZO62
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7695a4fd87188d250a376ccc14c273d8_JaffaCakes118
Files
-
7695a4fd87188d250a376ccc14c273d8_JaffaCakes118.exe windows:4 windows x86 arch:x86
9c2e73f94d761e2bb070d6c1139ac9a4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DialogBoxIndirectParamW
EnumDesktopsW
BroadcastSystemMessageA
TranslateAcceleratorA
DispatchMessageW
CopyAcceleratorTableW
CallMsgFilterW
InsertMenuA
CreateMDIWindowA
RemovePropA
ChangeDisplaySettingsW
InsertMenuItemW
kernel32
FindResourceA
GetProfileIntW
EnumResourceLanguagesA
CreateJobObjectA
WriteProfileSectionA
GetPrivateProfileSectionNamesA
SetCurrentDirectoryW
ReadConsoleInputExA
lstrcmpW
CreateEventA
GlobalAddAtomA
ReadConsoleInputA
GetPrivateProfileSectionNamesA
ReadConsoleW
msvcrt
frexp
sin
putchar
iswspace
bsearch
sinh
isspace
ceil
fabs
Sections
.CODE Size: 142KB - Virtual size: 808KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 512B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE