Static task
static1
Behavioral task
behavioral1
Sample
d58d6231cac8511575e3b55c4a8023c3_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d58d6231cac8511575e3b55c4a8023c3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d58d6231cac8511575e3b55c4a8023c3_JaffaCakes118
-
Size
17KB
-
MD5
d58d6231cac8511575e3b55c4a8023c3
-
SHA1
7bfef7c30e643747b52f6d9b1fd31fe80b471887
-
SHA256
b9e2247848d76bfd99be2195ee64b53e504542dc3eeb2666439befe7d5b2df1c
-
SHA512
9041b160ddc6d145667b36a50c15a77f3fc85ee486c2eb4aaf5af9570b149fe6e03e06d64c2e94e74f1b34a35ea55dd2d799b053dc48dfbd66493d70908e0d58
-
SSDEEP
192:z1JKzaWOk69NM981Hw9OFV6em6U+pdtu/Qxp2Ea7COjkDKvoPf16SuurpxOtOtZt:ZJwzki88AEem+iQHUDoMdu1xV3cg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d58d6231cac8511575e3b55c4a8023c3_JaffaCakes118
Files
-
d58d6231cac8511575e3b55c4a8023c3_JaffaCakes118.exe windows:1 windows x86 arch:x86
313a383c9ffd446a1d956ebd8fbe8a9a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateDialogParamW
DdeClientTransaction
DdeInitializeW
DdeUninitialize
GetClassLongW
gdi32
CreatePen
EnumICMProfilesW
Chord
DPtoLP
ExcludeClipRect
BitBlt
Arc
shell32
SHQueryRecycleBinW
ExtractIconW
CheckEscapesW
SHLoadInProc
SHFileOperationW
SheFullPathW
kernel32
GetStringTypeW
GetModuleHandleW
GetThreadLocale
IsBadCodePtr
IsBadReadPtr
LocalHandle
Sections
����t Size: - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE