Static task
static1
Behavioral task
behavioral1
Sample
876810fb324438a95dea17ba91a5aca4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
876810fb324438a95dea17ba91a5aca4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
876810fb324438a95dea17ba91a5aca4_JaffaCakes118
-
Size
273KB
-
MD5
876810fb324438a95dea17ba91a5aca4
-
SHA1
bcf67732dcc223e2223ca10bc6f875edb620dace
-
SHA256
48761c0373b399b24b59e6ca0ca7622ec7336f6466c0b52eedf820ceea806fca
-
SHA512
40da36a1c14c51d9fe5360742a740528ae6937074267b364225cc3cf57373ca0d20fc9bb4352bf86ec3189f3797012e0f8ec8bbd58b71dfc8a8e31421ab6ba1e
-
SSDEEP
6144:7x9GZK+3O/MDT1iy8E+dlOjTuL8y6hJQOT6:docwFiF9dlOj6Lie
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 876810fb324438a95dea17ba91a5aca4_JaffaCakes118
Files
-
876810fb324438a95dea17ba91a5aca4_JaffaCakes118.exe windows:4 windows x86 arch:x86
260c5f98ff8acea8bc2af574a0351ca1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateEventA
CreateIoCompletionPort
CreateThread
EnterCriticalSection
ExitThread
FindNextFileA
GetLocalTime
GetModuleHandleA
GetTickCount
GlobalAlloc
GlobalUnlock
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
SetEvent
SetLastError
Sleep
WaitForSingleObject
WriteConsoleA
lstrcatA
lstrlenA
user32
wsprintfA
CopyRect
EndDialog
EndPaint
GetClassInfoExW
GetFocus
GetMenuState
LoadIconW
MessageBeep
RegisterWindowMessageW
SetCapture
WaitMessage
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 922B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 259KB - Virtual size: 262KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ