Static task
static1
Behavioral task
behavioral1
Sample
b6acce4811dd15122bb9af5d1852e0eb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b6acce4811dd15122bb9af5d1852e0eb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b6acce4811dd15122bb9af5d1852e0eb_JaffaCakes118
-
Size
37KB
-
MD5
b6acce4811dd15122bb9af5d1852e0eb
-
SHA1
4641bce01a6c27ce5cd1a2cb8ef66951c4f45b8c
-
SHA256
493e618ff68da1615e2ff02fd2602cb8448e819eb5045af7dfe27cff7cb67390
-
SHA512
9ac513a218e684eb4397685beb68784641bde122aa31c647c33faeb2b57a2f2faf2d2bed8286c9f560d92114dfa330f8d008276cbc931ac67983d629700c863e
-
SSDEEP
384:DA1wq256OyWhnQxEBOExryIGGn5Ff5qY6ljHBj8kqYLZM6Exxxqi:DA1e56Vm2iZyIBnfAR7Bqoax
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6acce4811dd15122bb9af5d1852e0eb_JaffaCakes118
Files
-
b6acce4811dd15122bb9af5d1852e0eb_JaffaCakes118.exe windows:1 windows x86 arch:x86
fd5dd4c0e0fab14880b142395752c8c7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
PostMessageA
SetMessageQueue
RegisterWindowMessageA
MessageBoxA
GetFocus
kernel32
GlobalUnlock
GetModuleFileNameA
GlobalFree
GetStartupInfoA
GlobalAlloc
GlobalLock
GetModuleHandleA
nlsrtl32
ord3
ord2
ord4
ord201
ord175
ord117
ord6
ord203
ord11
tk23w32
ord8005
ord8002
ord10015
og25w32
ord5
nn12w32
ord4
ord28
ord132
ord131
ord136
ord85
msvcrt2x
_adjust_fdiv
__getmainargs
__p__commode
malloc
__p__fmode
exit
_controlfp
_except_handler3
free
strncmp
_XcptFilter
_exit
_initterm
__p__acmdln
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 548B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE