Static task
static1
Behavioral task
behavioral1
Sample
82d4951f81e6309dab376453355a3afc_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
82d4951f81e6309dab376453355a3afc_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
82d4951f81e6309dab376453355a3afc_JaffaCakes118
-
Size
180KB
-
MD5
82d4951f81e6309dab376453355a3afc
-
SHA1
7d0f77aa427976ddf67ad89c5ef16167a88362a3
-
SHA256
ca7f7aa1ed87f9aaca89abed72865a6223237d7d44dee650816ced782fdf6352
-
SHA512
ddb4dd72ec2f1cbdbff953243f9c272938b80caa3689b0158ba02ac6fd0a99b7f9dc169b57206a9d6033c0b517ed536371cb1cc3ccddb453b58b0844c5f96933
-
SSDEEP
3072:bjylAh9nwc+6qRKpJL5/JGpAJXT+a4XI+cCFknM30RpbDL5K6vWBqE6TK:b/Sc+HRKpJOaj8Y+cXm0RxDEwWBqi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82d4951f81e6309dab376453355a3afc_JaffaCakes118
Files
-
82d4951f81e6309dab376453355a3afc_JaffaCakes118.exe windows:4 windows x86 arch:x86
5a8ab271436cfde1f04dff7d4f7ec3e4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
timeEndPeriod
shell32
Shell_NotifyIconA
user32
FindWindowA
TrackPopupMenuEx
DestroyMenu
CreatePopupMenu
RedrawWindow
ClipCursor
GetDesktopWindow
rpcrt4
NdrFixedArrayFree
UuidCreate
kernel32
FlushInstructionCache
UnmapViewOfFile
DuplicateHandle
FindResourceExA
EnumResourceNamesW
SetEnvironmentVariableW
FindFirstFileA
GetModuleFileNameW
MapViewOfFile
FindClose
Sections
.text Size: 109KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 764B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ