Static task
static1
Behavioral task
behavioral1
Sample
a740c48e882b22c9c5d8a6e59636bad7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a740c48e882b22c9c5d8a6e59636bad7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a740c48e882b22c9c5d8a6e59636bad7_JaffaCakes118
-
Size
133KB
-
MD5
a740c48e882b22c9c5d8a6e59636bad7
-
SHA1
48eb5d62ca010254e9a83cf8f6c5b4d486094f85
-
SHA256
428703c4fca5d56add0db30ce6c98e59861a11e7f8931146ff66b36b33b7b2a0
-
SHA512
87ad60abc646970fbe92fed8ae412ea448f585c0565f1a1cc70fc7531c369c1e22a3dd5435c086ba9b6593142939425914ff2df8e14f9e0fab3a1ee4242f79cf
-
SSDEEP
3072:f07eivaz8kjMyJB7wDQ6v7u5ady05MPLMcd/UMz:JA2dvC7u5ady05ELMcd/p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a740c48e882b22c9c5d8a6e59636bad7_JaffaCakes118
Files
-
a740c48e882b22c9c5d8a6e59636bad7_JaffaCakes118.exe windows:4 windows x86 arch:x86
8c9ff815668cb6fa75ecff4ef7d2e4d6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringW
ExitProcess
FreeResource
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoW
GetTimeZoneInformation
GlobalReAlloc
InterlockedExchange
IsDebuggerPresent
LoadLibraryA
SetFilePointer
TerminateProcess
VirtualAlloc
VirtualFree
WriteFile
lstrcmpiW
user32
CharNextA
CreatePopupMenu
GetActiveWindow
GetClassInfoA
GetForegroundWindow
GetSubMenu
LoadIconA
PostQuitMessage
PtInRect
SendMessageA
ShowWindow
TranslateMessage
gdi32
BitBlt
CreateDIBSection
CreateFontIndirectA
CreateRectRgn
GetDCOrgEx
GetEnhMetaFileHeader
MaskBlt
RealizePalette
RestoreDC
SelectObject
SetBkMode
TextOutA
shell32
CommandLineToArgvW
DoEnvironmentSubstW
DragAcceptFiles
DragQueryFileW
FindExecutableW
SHBrowseForFolderA
SHChangeNotify
SHGetFileInfoA
ShellExecuteA
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ