Static task
static1
Behavioral task
behavioral1
Sample
76c820b3f78582a08a4f0800c93eb867_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
76c820b3f78582a08a4f0800c93eb867_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
76c820b3f78582a08a4f0800c93eb867_JaffaCakes118
-
Size
392KB
-
MD5
76c820b3f78582a08a4f0800c93eb867
-
SHA1
e6db8a8dc5405a0b4e4768f466b2e7115b63ce21
-
SHA256
7c869e520e9b25348378290d0fe6612687b9d92ff8ef795d7d16d2961fed9cfa
-
SHA512
bf46acd208aa4f2e2e17263e4d09acb8981161c262313210705f8de9b34264466306fde975c888935649bd054e8e18c42e15e433b89cdd5af0fffa0e4d1de4f4
-
SSDEEP
12288:aDXUyau9eyDi8Zwb2FJxjTwQN5fg1Eth6XEb:2R9eyWKwkJxruLUb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76c820b3f78582a08a4f0800c93eb867_JaffaCakes118
Files
-
76c820b3f78582a08a4f0800c93eb867_JaffaCakes118.exe windows:4 windows x86 arch:x86
97660400c2f4b1f03ee81acde996e6c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsA
GetACP
SetLastError
CreateFileA
CreateMutexA
HeapCreate
ExitProcess
GlobalFree
IsBadCodePtr
FindClose
UnmapViewOfFile
GetLastError
LocalUnlock
FindResourceA
LoadLibraryExA
SetVolumeMountPointA
FreeConsole
TlsGetValue
HeapDestroy
GetModuleHandleA
user32
CopyRect
DrawMenuBar
GetIconInfo
GetFocus
FillRect
CheckRadioButton
DrawEdge
GetDC
DefWindowProcW
CallWindowProcA
GetDlgItem
DispatchMessageA
IsWindow
uxtheme
DrawThemeText
GetThemeSysInt
DrawThemeEdge
DrawThemeIcon
GetThemeRect
clbcatq
SetupOpen
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ