Static task
static1
Behavioral task
behavioral1
Sample
d00de06c87aec808244e2b9cfb9d507a_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
d00de06c87aec808244e2b9cfb9d507a_JaffaCakes118
-
Size
93KB
-
MD5
d00de06c87aec808244e2b9cfb9d507a
-
SHA1
eeae3ee6b5f9c9ca73760d1c3201d774faf55e7c
-
SHA256
ad64f87b070f9164330e00009a924b22c1b63c068558ef1c0afda9682a111f1b
-
SHA512
65d27ec15187438cd2ecaf0f0f7e36a30d361f34d6617b07c769504503911457e3da0c8fed2ef410933896b42409ef8a810a657fe12b97c6e84b248d3c003760
-
SSDEEP
1536:n0K09pLHrViziMNkYMAdtVRI70NsemvHUWL/h/6Qo1FYf1A91wtHXCD6eYFMMLW2:n09JHQNRvna70NDm/UWLxo1cAneHXc6L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d00de06c87aec808244e2b9cfb9d507a_JaffaCakes118
Files
-
d00de06c87aec808244e2b9cfb9d507a_JaffaCakes118.exe windows:5 windows x86 arch:x86
51ee2d8823a9b9e98754d08bea784cbe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndPaint
LoadCursorA
RegisterClassExA
LoadIconA
DestroyMenu
GetWindowLongA
EnableMenuItem
BeginPaint
CheckMenuRadioItem
CreatePopupMenu
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
SetWindowTextA
gdi32
CreateSolidBrush
GetBkColor
CreateHatchBrush
DeleteObject
GetStockObject
MoveToEx
ole32
GetConvertStg
CreateItemMoniker
StringFromCLSID
CreateObjrefMoniker
OleIsCurrentClipboard
CoInitialize
ProgIDFromCLSID
OleRegGetMiscStatus
oleaut32
CreateErrorInfo
kernel32
GlobalFree
EnterCriticalSection
InitializeCriticalSection
LoadLibraryA
GlobalAlloc
GetStartupInfoA
GetLastError
HeapAlloc
HeapCreate
GetACP
DeleteCriticalSection
LeaveCriticalSection
FreeLibrary
GetCommandLineA
GetModuleHandleA
GetVersionExA
Sections
.text Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE