Static task
static1
Behavioral task
behavioral1
Sample
b12d75c35305b578500a99bd0fc5495c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b12d75c35305b578500a99bd0fc5495c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b12d75c35305b578500a99bd0fc5495c_JaffaCakes118
-
Size
20KB
-
MD5
b12d75c35305b578500a99bd0fc5495c
-
SHA1
5ee39a41c8c673e23f2e0240d93f79400d63cb69
-
SHA256
482e36c0d46e5046e6a4ff93ff37a2e77e8ccf5fe0d1ee8afad56dd5a72e07ad
-
SHA512
f9c728129433b97e277b2e69a24f92fbb04d0c460255c3025ecd84b721986a48c385e609f734c30b69eeb2d5e01028714d02cc05c1b9dfa9f9be524cc97cb45d
-
SSDEEP
384:g9/Sj608Yx0zpVK0KaO+ZiLywMVsujbJGAUpneuL6sEzhl70:aSSo09VyUZiGhmujPsn2TdF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b12d75c35305b578500a99bd0fc5495c_JaffaCakes118
Files
-
b12d75c35305b578500a99bd0fc5495c_JaffaCakes118.exe windows:1 windows x86 arch:x86
1e47a0f5154825ad92bde7492c0e43ff
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHFileOperation
StrChrW
Control_RunDLLW
SHEmptyRecycleBinA
SHFileOperation
SHGetDesktopFolder
RealShellExecuteExW
user32
CopyImage
ChangeMenuW
CallMsgFilterW
CreateMenu
gdi32
GdiStartDocEMF
GetDeviceCaps
FloodFill
PathToRegion
PtInRegion
RectInRegion
PolyPatBlt
GetTextColor
GetPixelFormat
Sections
����t Size: - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE