Static task
static1
Behavioral task
behavioral1
Sample
a558083473405a6336177aa61b6f9fcd_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a558083473405a6336177aa61b6f9fcd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a558083473405a6336177aa61b6f9fcd_JaffaCakes118
-
Size
16KB
-
MD5
a558083473405a6336177aa61b6f9fcd
-
SHA1
02fd06da09e7ed2683b967fa3c22183e2c199bee
-
SHA256
1c3e77b0188eb2a1a84ad78894a3b5bfce2088980d061839167d1a5cbc247e8e
-
SHA512
9f84733b9b2bb385cb0ab8cf8da0659c1ed40386f7f6df4c32f6c7b580897d5d8d9e110e1d50698d4ed51b392b25d5991c3c7c355a265be7b033dabc60110332
-
SSDEEP
192:tKMMI/UdEexrgH9XDFXm7NiYdqjaVV6s4udy:pMH3xruXXSNi46ody
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a558083473405a6336177aa61b6f9fcd_JaffaCakes118
Files
-
a558083473405a6336177aa61b6f9fcd_JaffaCakes118.exe windows:4 windows x86 arch:x86
77e85f2ac5f107f9e3ed0f3804b08733
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsFree
GetOEMCP
GetConsoleCP
ReleaseMutex
GetModuleHandleA
GetLargestConsoleWindowSize
GetUserDefaultLangID
CreatePipe
AddAtomA
GetExitCodeThread
CancelWaitableTimer
GetShortPathNameA
TlsGetValue
CompareStringA
VirtualAlloc
GetThreadTimes
IsDBCSLeadByte
GetThreadLocale
CreateMutexA
SetEvent
GetThreadPriority
user32
ValidateRect
ReleaseDC
GetFocus
IsWindowVisible
GetClassNameA
GetForegroundWindow
GetClassInfoExA
GetActiveWindow
GetWindow
CloseWindow
GetWindowTextLengthA
ShowWindow
GetSystemMetrics
InvalidateRect
IsIconic
RegisterClassA
GetWindowTextA
ReleaseDC
GetDC
shell32
SHGetFileInfoA
SHGetFolderPathA
SHChangeNotify
SHBrowseForFolderA
SHCreateShellItem
secur32
AcceptSecurityContext
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ