C:\Hello\Insert\Data\File.exe
Static task
static1
Behavioral task
behavioral1
Sample
8780b9a0792098fa66b6e419bdf57c20_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8780b9a0792098fa66b6e419bdf57c20_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8780b9a0792098fa66b6e419bdf57c20_JaffaCakes118
-
Size
188KB
-
MD5
8780b9a0792098fa66b6e419bdf57c20
-
SHA1
84a63a9b3e2e19467896f90f2f491b87ff5d8aa7
-
SHA256
3fe9e40785dced28fd7aab0eec4e4f0f5b474eebfe82770c07edae7f35b6abd1
-
SHA512
308b07692b4f5bb5e76f558efa3c9380cbede621bbe2c00e709ec417b9667ce4e03a7e6a5bdf9110163f009e6828854859d5670f78f4812d8e1866c024386773
-
SSDEEP
3072:rr8lKfwQX3EFz+Y0tdW2aZY/rF2owZN0mUPrfWpjBJSPB9EF:0lKF0+HnaZYTFZwZhUPzWhSB9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8780b9a0792098fa66b6e419bdf57c20_JaffaCakes118
Files
-
8780b9a0792098fa66b6e419bdf57c20_JaffaCakes118.exe windows:5 windows x86 arch:x86
3cfb418a0322148619c2ec2c596acd4f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
SetWindowOrgEx
SetBitmapBits
CreateFontIndirectA
CreateRectRgn
GetTextExtentPointA
GetSystemPaletteEntries
SetAbortProc
DeleteObject
CreateDiscardableBitmap
SetViewportExtEx
EndPage
kernel32
GetSystemDirectoryA
SetHandleCount
GetPriorityClass
AddAtomA
GetSystemWindowsDirectoryW
GetBinaryTypeW
LeaveCriticalSection
GetShortPathNameA
FindClose
ClearCommBreak
CreateThread
CreateFileW
SystemTimeToFileTime
GetExitCodeThread
CreateFileA
Sections
.text Size: 154KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ