Static task
static1
Behavioral task
behavioral1
Sample
c0f5b3a69b8270d9578050b2926083c9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c0f5b3a69b8270d9578050b2926083c9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c0f5b3a69b8270d9578050b2926083c9_JaffaCakes118
-
Size
66KB
-
MD5
c0f5b3a69b8270d9578050b2926083c9
-
SHA1
14d4de76b7d4427b66014d2b67d79a417417880e
-
SHA256
22d765b0bd3eb1a62287d0f2f85c94ca0429885ff7b5e0655a928bf8f54fd6cc
-
SHA512
a08a7c52098623bf5c76fde4cf1d04e5cc525c0a707a34afa4e652b0bc0d67341d90b3c5a046e5eb21907bb9825e8ca892fb9fd3fc854aeb6f783baa9b42db43
-
SSDEEP
1536:KOpp4PVnLTNeki++eQqQRBwr9mb2mZsHpbS7VIF0jaD4:KMpULhfGVzRawKzpbShIFAA4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0f5b3a69b8270d9578050b2926083c9_JaffaCakes118
Files
-
c0f5b3a69b8270d9578050b2926083c9_JaffaCakes118.exe windows:4 windows x86 arch:x86
f7d9c4fe2746374675d572cc6bd17b5f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
AddAce
ReadEventLogW
CryptGenKey
PrivilegeCheck
CryptSetHashParam
kernel32
Beep
CreateSemaphoreW
EndUpdateResourceW
CopyFileExW
GetACP
GetDriveTypeW
GetExitCodeThread
user32
GetCursor
GetAsyncKeyState
GetProcessWindowStation
MapDialogRect
SetMenu
SetClipboardData
Sections
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE