Static task
static1
Behavioral task
behavioral1
Sample
d727aad156ca566927036135b30509ab_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d727aad156ca566927036135b30509ab_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d727aad156ca566927036135b30509ab_JaffaCakes118
-
Size
81KB
-
MD5
d727aad156ca566927036135b30509ab
-
SHA1
b2afecedc044f81c6a561c25210e0ebee970260e
-
SHA256
8bce86905889f8d3e2fbe159051e522721048bbf57111b135f7e0c4dce721949
-
SHA512
b52dc86d222952f8b4347d76b24a4c321127608ba856222af9d60b0642dcbf1a5dde5ca50a9f1acca94f536de0b57bcd71cef4f00bd59d2b7134c0ecba4bbe5e
-
SSDEEP
768:E7OOAJdWoy4uO8zfWAZVV5OQNMhmt590f9qnfWf5NykQV47d/8VqhieJEn0e:TOi7UzpryQ/tb01qf6Nykx/bUNn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d727aad156ca566927036135b30509ab_JaffaCakes118
Files
-
d727aad156ca566927036135b30509ab_JaffaCakes118.exe windows:4 windows x86 arch:x86
5a300c7bba54d3fb66c7a3733765e4f3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumResourceTypesW
Heap32First
FreeConsole
IsBadStringPtrA
GetLastError
CancelIo
ResetEvent
GetDiskFreeSpaceExA
SetLocalTime
LoadLibraryExW
IsBadReadPtr
GetLogicalDrives
GetModuleHandleA
VirtualProtect
CloseHandle
SetLastError
GetCommandLineA
TlsGetValue
LocalFree
FindClose
user32
DragDetect
IsIconic
DispatchMessageA
CreateMenu
CopyImage
GetScrollBarInfo
CloseWindow
GetMessageA
EnableWindow
GetUpdateRect
CreateWindowExA
DialogBoxParamA
GetKeyState
hlink
HlinkClone
HlinkOnNavigate
HlinkCreateFromString
HlinkNavigate
HlinkCreateFromData
advapi32
RegCloseKey
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE