Static task
static1
Behavioral task
behavioral1
Sample
d04e7085aecb82e66dd8b260c757aab7_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
d04e7085aecb82e66dd8b260c757aab7_JaffaCakes118
-
Size
132KB
-
MD5
d04e7085aecb82e66dd8b260c757aab7
-
SHA1
4e1ed9647645eafe15241b2d09c577bbeddbfd98
-
SHA256
5034d0ef9059527d524f3c46e27975c9d1ae42169cf597684f62a22c9f6d9f71
-
SHA512
1d598fb91a72c4d29b2351c6030b816c031e68b9d1bbba140ea5d96a318ebf55e9c620ca29011acceba2e8848de41fc35873d5ca2236937914e5d5ba6d9d6b66
-
SSDEEP
3072:RcQF/6DSz2LYHfmLRSjtI19wsjjB8UI2GX1QMhuOIOMeWoXDD2EzR86hK2Wy:RxMDSz2LYHfmLRSjtI19wsjjB8UI2GX9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d04e7085aecb82e66dd8b260c757aab7_JaffaCakes118
Files
-
d04e7085aecb82e66dd8b260c757aab7_JaffaCakes118.exe windows:6 windows x86 arch:x86
619b3c852678e8d8c0d828faa3ba0323
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetTextColor
esent
JetGetBookmark
kernel32
GetCommandLineW
GetCurrentThread
GetThreadPriority
GetSystemTime
user32
SetMenu
GetScrollPos
GetScrollRange
SetTimer
GetFocus
IsWindowEnabled
IsClipboardFormatAvailable
CountClipboardFormats
GetShellWindow
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.io Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CONST Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ