Static task
static1
Behavioral task
behavioral1
Sample
a8495b240b9d3b5ca9a8377e8ad9c87b_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a8495b240b9d3b5ca9a8377e8ad9c87b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a8495b240b9d3b5ca9a8377e8ad9c87b_JaffaCakes118
-
Size
31KB
-
MD5
a8495b240b9d3b5ca9a8377e8ad9c87b
-
SHA1
ebe71c186dbea8da276a43ea3da2561b5dabe063
-
SHA256
9e00d0526fb56de42f22571e231facfc18e3e1849ec8cb4164ab8c2baa8d37fc
-
SHA512
145769829155adc32914ee481cc1f3bfc23f8208b3ca9512c6f1099fe21112643037a4da155c771d3ff2c311b84e202cc0519973ed2d7d41ac2723332d45e977
-
SSDEEP
768:20K2JuYQah2j7LBbsi8I0cVxWZId976S0i50V8MOks0tFjqC:hqasj7lQiMcVQZIF0i50VYk7RZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8495b240b9d3b5ca9a8377e8ad9c87b_JaffaCakes118
Files
-
a8495b240b9d3b5ca9a8377e8ad9c87b_JaffaCakes118.exe windows:4 windows x86 arch:x86
203ec172e8b4c7bf320506b4cd421061
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumResourceTypesA
GetConsoleTitleA
GetDefaultCommConfigW
SetEnvironmentVariableA
GetPrivateProfileStringW
SetVolumeLabelW
user32
OemToCharW
IsDialogMessageA
LoadStringA
DrawStateA
DrawTextA
IsCharAlphaNumericW
SetUserObjectInformationA
gdi32
CreateScalableFontResourceA
GetGlyphIndicesA
GetCharABCWidthsA
CreateFontIndirectExA
GetCharABCWidthsA
Sections
.share Size: 23KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.��� Size: 1024B - Virtual size: 653B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ