Static task
static1
Behavioral task
behavioral1
Sample
7918ad2c750319e6976203dd82f6f18e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7918ad2c750319e6976203dd82f6f18e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7918ad2c750319e6976203dd82f6f18e_JaffaCakes118
-
Size
38KB
-
MD5
7918ad2c750319e6976203dd82f6f18e
-
SHA1
b1a783f16cb01d3ce3bb5eb6a4d3fc50866b80d0
-
SHA256
c3f7a4275c452e20c4549374ae3d0bcb4a0fdbc31e6c99f63092d1dfc3d67d8c
-
SHA512
c84f8cc07d19a3c8c95333d40b1ba472edcda14e988bb9f2677ed5e81f18281fbe6cbccdf5f8c5df0ab07c10cd9eb328b9928287e2189dc6e13c14896ca2dc64
-
SSDEEP
768:5Yu8P6wlq908EoSFoItH1JmDSkHnLjeYyv1C484pvsazp:+P6OyE91tH1ASeeYyp88Ea
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7918ad2c750319e6976203dd82f6f18e_JaffaCakes118
Files
-
7918ad2c750319e6976203dd82f6f18e_JaffaCakes118.exe windows:4 windows x86 arch:x86
97c1770361601ced061f0fcd8b2d5982
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
StretchBlt
SetICMMode
SetRelAbs
ResetDCW
SetDIBColorTable
UpdateColors
SaveDC
TextOutW
shell32
StrRStrIW
SHAppBarMessage
kernel32
ExitProcess
TerminateProcess
Sections
.text Size: 20KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE