Static task
static1
Behavioral task
behavioral1
Sample
9fc70eed6f84184ed6881c159faa4c73_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9fc70eed6f84184ed6881c159faa4c73_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9fc70eed6f84184ed6881c159faa4c73_JaffaCakes118
-
Size
393KB
-
MD5
9fc70eed6f84184ed6881c159faa4c73
-
SHA1
00bed50cdbbf8472848e278903271bf6e8479f92
-
SHA256
e5718eccb2449905c80e261ddab85f22cea9a007d9c7a83e89979939f8eaa5e0
-
SHA512
c8352c605bf75613711c0a868f6f43d56f86b1a1715edb6b85d314e65aeb743a0b1d6c50f22e28204eae5ac5998686cc49edd24da01af84d53afebc877246155
-
SSDEEP
6144:Yftq6S1dGppg6gUmXepiZujTthY8fMccz907DP3dMKsucbTb9Vhpfn2BLuPbNNie:9dGppg0zj7Y8Sz96jdbsucLJUSBwe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9fc70eed6f84184ed6881c159faa4c73_JaffaCakes118
Files
-
9fc70eed6f84184ed6881c159faa4c73_JaffaCakes118.exe windows:4 windows x86 arch:x86
dc10ad566427e4b77e0cccdd9e90b836
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileMappingA
CloseHandle
GetModuleHandleA
TlsGetValue
IsDebuggerPresent
GetConsoleCP
GetStdHandle
LocalUnlock
FindClose
IsBadReadPtr
LocalFree
LoadLibraryExA
CreateEventA
HeapCreate
FreeEnvironmentStringsA
GlobalLock
GetLastError
CreateFileA
GetFullPathNameA
GetACP
user32
PostMessageA
GetDlgItem
IsWindow
GetMessageA
DispatchMessageA
EmptyClipboard
DefWindowProcA
ScrollWindow
SetFocus
GetDC
EndDialog
CreateDialogParamA
GetIconInfo
DrawIconEx
msasn1
ASN1BERDecEoid
ASN1BERDecBool
ASN1BERDecCheck
ASN1BEREncLength
ASN1BEREncFlush
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ