Static task
static1
Behavioral task
behavioral1
Sample
adf6e26cc42900f9858a32b398275cf9_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
adf6e26cc42900f9858a32b398275cf9_JaffaCakes118
-
Size
46KB
-
MD5
adf6e26cc42900f9858a32b398275cf9
-
SHA1
3155e1a7c13784e0b323d6489caabc3810d369b2
-
SHA256
57ba03a342944114bb07c1b40bafa08c5bd7f3948496797d6c9e8b666bb67c0d
-
SHA512
472c73706a42a546cfeefd535885c0c6044299d31071c6decdff53728f8f87ff1a49e1081627bd1c73fb8f48b2d801e8a0460426ffa3c6b3cc5cd935fa24138e
-
SSDEEP
768:mcysAy658u5YGE3gRpfyeb+yM1wEjKVfxY+DWx7TLFvY3O1A4aNnOGL6Z5P:p156WIYGE3gRlGyM/P+C76k0OGO5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adf6e26cc42900f9858a32b398275cf9_JaffaCakes118
Files
-
adf6e26cc42900f9858a32b398275cf9_JaffaCakes118.exe windows:4 windows x86 arch:x86
8b70ea531a58175bedc3fa17dccaed3a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVolumePathNameA
ReadConsoleOutputCharacterA
GetCurrentThreadId
GlobalUnfix
TerminateThread
SetLocalPrimaryComputerNameA
GetLastError
GetComPlusPackageInstallStatus
GetFileInformationByHandle
OpenMutexA
VirtualAlloc
GetSystemDirectoryA
GetVolumeNameForVolumeMountPointA
GetExitCodeThread
user32
PostThreadMessageW
GetDlgCtrlID
InternalGetWindowText
SetProcessWindowStation
GetUpdateRgn
GetMenuItemInfoA
GetMessageA
IsIconic
SystemParametersInfoA
EnumDesktopsA
PostMessageW
CreatePopupMenu
CopyAcceleratorTableA
SendDlgItemMessageA
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 796B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ