Static task
static1
Behavioral task
behavioral1
Sample
7801a07743c4fc9d5e7325ea48420972_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7801a07743c4fc9d5e7325ea48420972_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7801a07743c4fc9d5e7325ea48420972_JaffaCakes118
-
Size
63KB
-
MD5
7801a07743c4fc9d5e7325ea48420972
-
SHA1
dec157cae33eeb6e8a426ed397d119f8b0f92161
-
SHA256
09e1b3727b27ba96f0ef4d5c9f00f42b57a69b4c132dd6318899004d65fa3867
-
SHA512
7f418b8d017a5da24a1830832254665fecd4fb06e0a5323563bd9ee38c38c3c777625a3478155216c1afedf3a70e6b6951d1a9deca65bf1cfff0f0ce477fee5c
-
SSDEEP
1536:+xnbKyXHWGWgGdJUKmNC/ibSjh8nAz+ShbASwp0k6hWlC:+FbKyXWGDNSakpiSxAXB2Wl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7801a07743c4fc9d5e7325ea48420972_JaffaCakes118
Files
-
7801a07743c4fc9d5e7325ea48420972_JaffaCakes118.exe windows:4 windows x86 arch:x86
660399029509fe05369fb1ee1db465b8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
CloseHandle
VirtualFree
CreateFileA
VirtualProtect
VirtualAlloc
ExitProcess
user32
DialogBoxParamA
LoadIconA
gdi32
AbortDoc
advapi32
RegQueryValueA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 462B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ