Static task
static1
Behavioral task
behavioral1
Sample
870466db9d58bb35b8a19626b32bfaf5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
870466db9d58bb35b8a19626b32bfaf5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
870466db9d58bb35b8a19626b32bfaf5_JaffaCakes118
-
Size
393KB
-
MD5
870466db9d58bb35b8a19626b32bfaf5
-
SHA1
7b8c255199c66d11a5b0b961310e25e32dc510fb
-
SHA256
061c0a35a9f932f2eec1d4e6cc1a7beec77f83841721864bfd4806c010ab7bdb
-
SHA512
f9856b7b5e360b6e7b58510f4cf9dfac6b55321b80df8b7c132ab37f7aaa48defcff57ced29b537717f04beedbcdd0f94edbc486e030bbaff855fe7b795aa9ee
-
SSDEEP
6144:4Ttq6S1dGppg6gUmXepiZujTthY8fMccz907DP3dMKsucbTb9Vhpfn2BLuPbNNie:JdGppg0zj7Y8Sz96jdbsucLJUSBwe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 870466db9d58bb35b8a19626b32bfaf5_JaffaCakes118
Files
-
870466db9d58bb35b8a19626b32bfaf5_JaffaCakes118.exe windows:4 windows x86 arch:x86
dc10ad566427e4b77e0cccdd9e90b836
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileMappingA
CloseHandle
GetModuleHandleA
TlsGetValue
IsDebuggerPresent
GetConsoleCP
GetStdHandle
LocalUnlock
FindClose
IsBadReadPtr
LocalFree
LoadLibraryExA
CreateEventA
HeapCreate
FreeEnvironmentStringsA
GlobalLock
GetLastError
CreateFileA
GetFullPathNameA
GetACP
user32
PostMessageA
GetDlgItem
IsWindow
GetMessageA
DispatchMessageA
EmptyClipboard
DefWindowProcA
ScrollWindow
SetFocus
GetDC
EndDialog
CreateDialogParamA
GetIconInfo
DrawIconEx
msasn1
ASN1BERDecEoid
ASN1BERDecBool
ASN1BERDecCheck
ASN1BEREncLength
ASN1BEREncFlush
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ