Static task
static1
Behavioral task
behavioral1
Sample
d6f33a00db4140c40c3e93528efb4579_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d6f33a00db4140c40c3e93528efb4579_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d6f33a00db4140c40c3e93528efb4579_JaffaCakes118
-
Size
37KB
-
MD5
d6f33a00db4140c40c3e93528efb4579
-
SHA1
018fc4c67aa6219b63ebc6961890959a7de1d7ba
-
SHA256
46128aee62d2c9af9df0e3c8a2f5cd0ba8d6e9b020dc9a5bd19fb1b18354c139
-
SHA512
229266da05528d436ce53dd09f46e4938024d6f611f3c7e8d7396c8ecf9fde930b13197cfa9f2e79b33f5df23139221c033ee2ef3da1512104e86820c34f014a
-
SSDEEP
768:SaUqO911MYmQEMYkfXY2vfffM1mb5ZFxxLDx03KPTOh5Cb:STU6fnjhfDx0C6Cb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6f33a00db4140c40c3e93528efb4579_JaffaCakes118
Files
-
d6f33a00db4140c40c3e93528efb4579_JaffaCakes118.exe windows:4 windows x86 arch:x86
edd2157d287e4381594ad4bffc738585
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
BeginPaint
BeginPaint
CheckMenuRadioItem
CheckRadioButton
CreateMenu
CreateWindowExA
DestroyCursor
DestroyWindow
EndPaint
ExitWindowsEx
FindWindowExA
GetCapture
GetCursorPos
GetDC
GetDesktopWindow
GetSystemMetrics
GetWindow
GetWindowDC
GetWindowTextA
GetWindowTextLengthA
InvalidateRect
IsWindow
KillTimer
LoadCursorA
LoadIconA
ShowWindow
SystemParametersInfoA
TranslateMessage
UpdateWindow
ValidateRect
WaitMessage
wvsprintfA
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
BSS Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CRT Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CRT Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.code Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE