Static task
static1
Behavioral task
behavioral1
Sample
7c024b0c454727aa67bb320d063a008d_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
7c024b0c454727aa67bb320d063a008d_JaffaCakes118
-
Size
144KB
-
MD5
7c024b0c454727aa67bb320d063a008d
-
SHA1
e1b95566b3eb0cf7a4f2efd566afd5eded6f8d3f
-
SHA256
dc3185e0398231a5b5f6d8d84b736349927b86076be17fe473391fa266b5dde5
-
SHA512
a2cfa1428ca30dcb89517688ebac4621fc2dda421c82111693eb07facef62f515d9c0a6466ed4749f24a9171c43b29d015159a663efdcc19d862117c86f89307
-
SSDEEP
3072:F7mgUDtD5kBp5DHNmQ9ah/Kn7+CX3Pof4VQf/SrVM33dUu:F7m5kL5DHMQchK73nPO4VQXSpM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c024b0c454727aa67bb320d063a008d_JaffaCakes118
Files
-
7c024b0c454727aa67bb320d063a008d_JaffaCakes118.exe windows:5 windows x86 arch:x86
b1e8a0f6ac2a69dfbf91e67706adee1f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
clusapi
ClusterResourceCloseEnum
pdh
PdhGetFormattedCounterValue
gdi32
EndPath
oleaut32
VARIANT_UserSize
VarCyFromUI4
rasapi32
RasSetEapUserDataA
msvcrt
memset
advapi32
AddUsersToEncryptedFile
mprapi
MprConfigInterfaceGetHandle
user32
IsClipboardFormatAvailable
RemovePropA
IntersectRect
GetAsyncKeyState
GetCursor
kernel32
GetVersion
UnhandledExceptionFilter
GetConsoleSelectionInfo
GetConsoleOutputCP
GlobalMemoryStatusEx
EnumSystemLocalesW
GetCurrentActCtx
GetSystemTimeAsFileTime
FreeConsole
GetSystemDefaultUILanguage
winscard
SCardListCardsA
Sections
.text Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
CODE Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ