Static task
static1
Behavioral task
behavioral1
Sample
8cc10e124adc18f326e94cadbf44ad95_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8cc10e124adc18f326e94cadbf44ad95_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8cc10e124adc18f326e94cadbf44ad95_JaffaCakes118
-
Size
17KB
-
MD5
8cc10e124adc18f326e94cadbf44ad95
-
SHA1
0df3fcce48bdfeb9f18e64efd8d10ea128116971
-
SHA256
2df6b445af1a5088f62713acf2123619300285c30402864bb251b16f342b3f84
-
SHA512
8d094da7ce9c5afc3b6de64e8e9480b121b98a4ba791f8c150fd7c379565168c95fc14ca7774e6d803c345e989346bd8ed30f6a69dbee05e945b1d92b1caf3ab
-
SSDEEP
384:LvsmpfT5UFLYW6XaevkoZmkXXolwZFQwE7xlWdHxzlcG6ts7SerdA2n5h4Bts:z5fT2D6KgoGlE7xl0xhcn+7m25h4Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cc10e124adc18f326e94cadbf44ad95_JaffaCakes118
Files
-
8cc10e124adc18f326e94cadbf44ad95_JaffaCakes118.exe windows:4 windows x86 arch:x86
69018250d213401bf6f91175ccc3afca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadIconA
LoadMenuA
MessageBoxA
MoveWindow
PostQuitMessage
RegisterClassExA
LoadCursorA
SendMessageA
ShowWindow
TranslateMDISysAccel
TranslateMessage
UpdateWindow
GetWindowRect
GetSubMenu
GetMessageA
GetMenu
GetClientRect
GetAltTabInfoA
DrawMenuBar
DestroyMenu
DispatchMessageA
DefMDIChildProcA
DefFrameProcA
ScreenToClient
CreateWindowExA
kernel32
lstrcatA
LoadLibraryA
GetModuleHandleA
GetModuleFileNameA
GetFileAttributesA
GetCommandLineA
ExitProcess
lstrlenA
comctl32
CreateToolbarEx
CreateStatusWindowA
InitCommonControls
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ