Static task
static1
Behavioral task
behavioral1
Sample
c1ac70499f8fbf1dbc803c5d106e1aac_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c1ac70499f8fbf1dbc803c5d106e1aac_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c1ac70499f8fbf1dbc803c5d106e1aac_JaffaCakes118
-
Size
110KB
-
MD5
c1ac70499f8fbf1dbc803c5d106e1aac
-
SHA1
e106a9377d73ab95129df2649a32217b2f491674
-
SHA256
1304832307f76c648bff333e70e33295656a6adbdc65d4c934094d10911c8b19
-
SHA512
2364ea9b4c3164a1975186b639ab115d35794be2a2cb430f3bbbcb43eca62db829c3cdbb3873fe46c54f0cb9387695e20337bd7056101b8dd91cf2530c8bfc2e
-
SSDEEP
1536:ItF+P0YjhY9oChHa3GKVE283gc7ibp/E0cS+ULsqa35ahroWLURDoq4OZZZLlCIS:I0jQhWGT283gcp0cCszAtoFRD68wb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1ac70499f8fbf1dbc803c5d106e1aac_JaffaCakes118
Files
-
c1ac70499f8fbf1dbc803c5d106e1aac_JaffaCakes118.exe windows:4 windows x86 arch:x86
1cccacec830be9dbe7db5bc0af5cbb64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExA
RegEnumKeyExA
RegEnumValueA
comctl32
ImageList_LoadImageA
ImageList_GetIconSize
MenuHelp
gdi32
GetBitmapBits
CreateDIBitmap
ExtTextOutA
CreateFontIndirectA
GetPixel
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 469B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ