Static task
static1
Behavioral task
behavioral1
Sample
b03d73c0eb97564d26af426cb73c1509_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b03d73c0eb97564d26af426cb73c1509_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b03d73c0eb97564d26af426cb73c1509_JaffaCakes118
-
Size
706KB
-
MD5
b03d73c0eb97564d26af426cb73c1509
-
SHA1
e8108aec4457dfe851e54a4f42f99e0ac4381636
-
SHA256
54f68933762746010f24e94e3a7258fd351c8a02ba2fe01f4d99c9468a14b332
-
SHA512
77ad94773b975a1a2c0008e14f2f393a0a65ba07db99cfba90ffc34596dbc47e84bf89d8bedaeae1232100f567976c53009b59c90b52bbed084fce8b128f954b
-
SSDEEP
12288:md9dG35V1JldftZLJHU/J97aFgezjX2MUdiRVrroc7uejLwaaaga7dw/zxm683:mdW5NrLJ0Ta6QmTiRVrMOxwTagaBMNmX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b03d73c0eb97564d26af426cb73c1509_JaffaCakes118
Files
-
b03d73c0eb97564d26af426cb73c1509_JaffaCakes118.exe windows:5 windows x86 arch:x86
3a9665dccb30fe2aeb26dc0879f907a9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FindResourceW
CreateProcessW
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentThread
OpenFile
VirtualAlloc
QueryPerformanceFrequency
GetCurrentProcessId
ExitProcess
user32
DestroyWindow
CreateWindowExA
SwitchDesktop
advapi32
RegCloseKey
Sections
0 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.r8ata Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 644B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.0141 Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.1541 Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.re00c Size: 512B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ