Static task
static1
Behavioral task
behavioral1
Sample
d1878e06b85cfd018659f6daf57ebbe3_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
d1878e06b85cfd018659f6daf57ebbe3_JaffaCakes118
-
Size
224KB
-
MD5
d1878e06b85cfd018659f6daf57ebbe3
-
SHA1
775227887cb8e37a1408340ef719d3cd60f416d3
-
SHA256
7d705a512be472d7022a88eb01d872def440642db3e07300bcbfea0cd1cadd41
-
SHA512
640dc0e9b8a2b362b7d995c250b1da9a8e83206a632102718769b433855d2e703eeb9084c88c91d86c3bc8ac5ef12ed325f6606681f978a7772135a4f75022ec
-
SSDEEP
6144:aDOQxRpzGWE9c8OOKvZN0c4jsqFZN09vDJvIBQSb:psRpvE9GR3vDJg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1878e06b85cfd018659f6daf57ebbe3_JaffaCakes118
Files
-
d1878e06b85cfd018659f6daf57ebbe3_JaffaCakes118.exe windows:4 windows x86 arch:x86
e7d17ce308344bb19935c0cfcdfbbbbe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SendMessageA
PostMessageA
FindWindowExA
FindWindowA
kernel32
lstrcatA
WriteFile
CloseHandle
CreateFileA
ExitProcess
GetTempPathA
GlobalFree
Sleep
shell32
ShellExecuteA
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 220KB - Virtual size: 222KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE