Static task
static1
Behavioral task
behavioral1
Sample
76bc512fb97cef269f3b5be43d57b9f7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
76bc512fb97cef269f3b5be43d57b9f7_JaffaCakes118.exe
Resource
win10v2004-20240729-en
General
-
Target
76bc512fb97cef269f3b5be43d57b9f7_JaffaCakes118
-
Size
359KB
-
MD5
76bc512fb97cef269f3b5be43d57b9f7
-
SHA1
8726eb64afb09a9367832aaa7537cc89e9ed7e6c
-
SHA256
cc87df5f355157ec67421a12bebcf5f18649ebab42d35bd9304c0ed014a38754
-
SHA512
b1095e587efbb65e6307c3329f9c32063cc036a331b076e71486fc44b18c30af3852916bbe989094610662c14c7cd76c94af1e07795d84806212d64f354cfb68
-
SSDEEP
6144:TVBXtruW8//rKC/Mz1C3sSTnvziJ+XV9Rgh3rKkg7rULU17:TTXBuVszcbiMXZgh7KxQL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76bc512fb97cef269f3b5be43d57b9f7_JaffaCakes118
Files
-
76bc512fb97cef269f3b5be43d57b9f7_JaffaCakes118.exe windows:4 windows x86 arch:x86
16bcfc692437b3f8196d1eef0a0b2c70
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SearchPathA
DeleteCriticalSection
TlsGetValue
GetModuleHandleA
ExitProcess
FindAtomA
VirtualProtect
FindVolumeClose
FindResourceExA
GetCalendarInfoA
CreateThread
GetTickCount
CloseHandle
Sleep
SetEvent
lstrlenA
GetDiskFreeSpaceA
ReleaseMutex
GetLastError
FindClose
user32
CreateMenu
EndDialog
IsIconic
EnableWindow
GetKeyState
CloseWindow
GetUpdateRect
GetScrollBarInfo
GetMessageA
DispatchMessageA
CopyImage
DragDetect
DialogBoxParamA
CreateWindowExA
msdmo
DMOGetName
DMOGetTypes
DMOUnregister
DMORegister
DMOEnum
advapi32
RegCloseKey
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ