Static task
static1
Behavioral task
behavioral1
Sample
8b3d42cf82a8ea5b359370f66254a9e9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8b3d42cf82a8ea5b359370f66254a9e9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8b3d42cf82a8ea5b359370f66254a9e9_JaffaCakes118
-
Size
171KB
-
MD5
8b3d42cf82a8ea5b359370f66254a9e9
-
SHA1
591a66e63c8b7e8216b918205b869d58b83baaa7
-
SHA256
745600b2b95d65c12220e0144fe4113633389099e81640579bfcf4e76c6b489d
-
SHA512
d25d1ba23e322ea387869927a80a4d64b3e0bf3f6c2107b59ccb46ea83907e02c56cf81eae952928237e7518c4ea40043bd4155128e79f4ab2c10304f71561e6
-
SSDEEP
3072:kbGSmgpgCV4JgIp27SZpJVoDtPyNdj7pvm71bZWAYTtkh/becCeF8:o/pFV4JgIE7S52Dt8/pOJbQpkh/becCN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b3d42cf82a8ea5b359370f66254a9e9_JaffaCakes118
Files
-
8b3d42cf82a8ea5b359370f66254a9e9_JaffaCakes118.exe windows:4 windows x86 arch:x86
099d748bb2b4a6837cf42e21fb0df77c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EnableWindow
LoadCursorW
SetParent
DestroyMenu
GetFocus
SetCursor
GetDesktopWindow
SetWindowPos
CreatePopupMenu
IsWindow
ClipCursor
RedrawWindow
InvalidateRect
TrackPopupMenuEx
PtInRect
kernel32
GetCurrentThreadId
GetShortPathNameW
UnhandledExceptionFilter
GetHandleInformation
LoadLibraryW
GetLastError
EnumResourceTypesW
CloseHandle
GetCurrentProcessId
ExitProcess
GlobalFree
CreateFileW
GetProcAddress
GetModuleHandleW
GetVersionExW
ole32
StgCreateDocfile
StgOpenStorage
msvfw32
ICClose
ICSendMessage
ICOpen
ICDecompress
Sections
.text Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1024B - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ