Static task
static1
Behavioral task
behavioral1
Sample
c8198e3f2b06cc0d7721cbe1c95bdd27_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c8198e3f2b06cc0d7721cbe1c95bdd27_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c8198e3f2b06cc0d7721cbe1c95bdd27_JaffaCakes118
-
Size
183KB
-
MD5
c8198e3f2b06cc0d7721cbe1c95bdd27
-
SHA1
67aa38efac66b3708e438b933c87e227f38ca147
-
SHA256
94c659e3a08c049b68bfc17a8bc5f162e677fd74f502e710c899880b8411710a
-
SHA512
4bda8254f1b721221bce9595f6db8629ef422b2a66cacfd4e66d9712a4f14354ced45f6fd5031f94de7145a468e39e07f926ffc32c1d04ae6738c6d75f778cf6
-
SSDEEP
3072:3P+3YX+5s5z8AY0hP0Ki3DvurzYNUc8KuKzQwBHL37NTdgGqLnGaKcfha:fqV+dvhc3afs2Z61BdgdJKcf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8198e3f2b06cc0d7721cbe1c95bdd27_JaffaCakes118
Files
-
c8198e3f2b06cc0d7721cbe1c95bdd27_JaffaCakes118.exe windows:4 windows x86 arch:x86
22aa56dddfad4c1555e6bdda900fd952
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetConsoleTitleW
TerminateProcess
CreateTimerQueue
GetDiskFreeSpaceW
Beep
SetThreadIdealProcessor
user32
InvertRect
SetWindowsHookExA
DdeGetLastError
EnumDisplayMonitors
CliImmSetHotKey
CallMsgFilterW
EnumDisplaySettingsExW
GetMenuItemCount
DestroyIcon
DrawTextW
CreateDialogIndirectParamAorW
CharToOemBuffA
wsprintfW
Sections
.text Size: 9KB - Virtual size: 809KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 170KB - Virtual size: 175KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pack32 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ