Static task
static1
Behavioral task
behavioral1
Sample
78f296e1d18c2fca961fae41de20f821_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
78f296e1d18c2fca961fae41de20f821_JaffaCakes118.exe
Resource
win10v2004-20240729-en
General
-
Target
78f296e1d18c2fca961fae41de20f821_JaffaCakes118
-
Size
25KB
-
MD5
78f296e1d18c2fca961fae41de20f821
-
SHA1
50f7ce5ff801595d734c7f031131f8c32abc1df6
-
SHA256
b72e3b8f2726ddcf2dc1c77b961a661757fff8ee919a137402eff6ea7efedf57
-
SHA512
cee8b1b1cd88c225aa6e34d5e05d0bf67f26a579b43782a82eae030e3a259f6e8049fb5b91e52ae7c42af52e8699c5db76472e09837c3fab2ce505b11992aaa4
-
SSDEEP
768:eaHKmM0qauedFQFtxTXKXAx6ZQgZOgRTLy7DBO:ezmMyTcTXfxhgZzTWO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78f296e1d18c2fca961fae41de20f821_JaffaCakes118
Files
-
78f296e1d18c2fca961fae41de20f821_JaffaCakes118.exe windows:4 windows x86 arch:x86
691f1193f16065947032ace3a2329e55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
fabs
comctl32
InitCommonControls
user32
IsChild
gdi32
BitBlt
ole32
CoInitialize
shell32
ShellExecuteExA
shlwapi
PathQuoteSpacesA
Sections
.MPRESS1 Size: 20KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE