Static task
static1
Behavioral task
behavioral1
Sample
9fd055d21fb7456d418398b18528c81b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9fd055d21fb7456d418398b18528c81b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9fd055d21fb7456d418398b18528c81b_JaffaCakes118
-
Size
179KB
-
MD5
9fd055d21fb7456d418398b18528c81b
-
SHA1
9edcc52504f72cce1eab1366a739c0c6b8298609
-
SHA256
81e638e42ec33632ff38376392ba267c007d65b35f598df1cf54b518c9dfb2e2
-
SHA512
ae3925e744c864f48a9fdd3f12fa8e9566f231a73a950e92b3ca3007db0e0d4427b67af3f85a0e5cb62724b8a6293ae5ca866f2e36cb379c696d17c48a5dd9a9
-
SSDEEP
3072:HzdJEtqoxy1doACTXKgFCXZZlIhOdoZUevhT9XJPCJDDNKl51uPCwmOStnN:HRWtqoxACTX8L+n3J6PNKl5YmOSt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9fd055d21fb7456d418398b18528c81b_JaffaCakes118
Files
-
9fd055d21fb7456d418398b18528c81b_JaffaCakes118.exe windows:4 windows x86 arch:x86
7b5b5fec155a63630821c3a0aa56fcc8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msimg32
AlphaBlend
TransparentBlt
user32
CreatePopupMenu
FindWindowA
ClipCursor
DestroyMenu
RedrawWindow
TrackPopupMenuEx
GetDesktopWindow
gdiplus
GdipGetImageHeight
GdipGetImageWidth
GdipCreateBitmapFromFile
GdipGetImagePixelFormat
GdipDisposeImage
winmm
timeGetTime
kernel32
FlushInstructionCache
LocalFree
LoadLibraryW
GetVersionExA
ExitProcess
SetLocaleInfoW
LocalAlloc
ExitProcess
GetModuleFileNameA
rpcrt4
I_RpcFreeBuffer
UuidCreate
Sections
.text Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 924B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ