Static task
static1
Behavioral task
behavioral1
Sample
962b0cbfa791636e344ed16ba4a1a8c6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
962b0cbfa791636e344ed16ba4a1a8c6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
962b0cbfa791636e344ed16ba4a1a8c6_JaffaCakes118
-
Size
515KB
-
MD5
962b0cbfa791636e344ed16ba4a1a8c6
-
SHA1
bfb33d3ca8b0e8e91b82de3ac5e639bbb3c5faac
-
SHA256
72149b97aa4cc9013d7f5d9c76438036cf1c5b2c8677330d6eabc24f1dc5c4a6
-
SHA512
0c3196b008fcde15f0b153d67adee2aedf8834c353b4cbe8946ee8b6a9d581fbaad93ada0afaab3cd70219c373e4561c58528a6ae1f961d3df231fdc12d129c7
-
SSDEEP
12288:RKB3V0vnnGXlnYM9FNJ3F+/KRpcfAWxLXqs76ve7I+L:EBFqnGXl7diBAWVR76v9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 962b0cbfa791636e344ed16ba4a1a8c6_JaffaCakes118
Files
-
962b0cbfa791636e344ed16ba4a1a8c6_JaffaCakes118.exe windows:4 windows x86 arch:x86
d4d7d8a52ef3ee0c0f63eabe060207f8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
DrawTextExW
gdi32
ExtSelectClipRgn
comdlg32
GetFileTitleW
winspool.drv
DocumentPropertiesW
advapi32
GetFileSecurityW
shell32
DragAcceptFiles
shlwapi
PathFindExtensionW
oledlg
OleUIBusyW
ole32
CoRevokeClassObject
oleaut32
SysStringLen
imagehlp
ImageDirectoryEntryToData
Sections
.text Size: 248KB - Virtual size: 596KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WYCao Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tc Size: 246KB - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE