Static task
static1
Behavioral task
behavioral1
Sample
c1a9d799b0ebd41d1302941fa0e6462a_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
c1a9d799b0ebd41d1302941fa0e6462a_JaffaCakes118
-
Size
132KB
-
MD5
c1a9d799b0ebd41d1302941fa0e6462a
-
SHA1
3b3b6fdbad67e8c638d1aa485cdb01ce3386987c
-
SHA256
e4e72af200b1560f5f0513bebaf6d682d2cb0be6c738bc208c6aa09920405a8d
-
SHA512
e3cc61d32e3bea18f8c7d2e8447d042d9e5e6e7d0bffe02fdca5e39911912f8015b99bc1a2613f17ec5de0694bef3573093d764c18040bbd54c86c85724f9b10
-
SSDEEP
3072:QwtYxW/CXXLM8S7DYnz6dmIsk91To2KnYxeRVdU7m0kRTduv0SBmw46:QEULM/f91sQxeRjU7nkRYsk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1a9d799b0ebd41d1302941fa0e6462a_JaffaCakes118
Files
-
c1a9d799b0ebd41d1302941fa0e6462a_JaffaCakes118.exe windows:6 windows x86 arch:x86
6ff0abceb7551e4a02d944c4df83a3c7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDesktopWindow
IsWindowVisible
GetCapture
GetScrollPos
WindowFromPhysicalPoint
IsMenu
SetCapture
GetWindowRect
kernel32
GetCurrentProcess
GetCommandLineW
IsProcessInJob
esent
JetIntersectIndexes
Sections
sijJ Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.yk Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CONST Size: 92KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
TIRQ Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ