Static task
static1
Behavioral task
behavioral1
Sample
ece86d1af9bc8b1e40a8b9213836c9c0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ece86d1af9bc8b1e40a8b9213836c9c0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ece86d1af9bc8b1e40a8b9213836c9c0_JaffaCakes118
-
Size
701KB
-
MD5
ece86d1af9bc8b1e40a8b9213836c9c0
-
SHA1
752e6de9f267a912771d161261a76e7c25a6f9cb
-
SHA256
1b70e01399499b07562f2ab3e959251ef7dba337fdc1f9ea32ae7a091096ddaa
-
SHA512
bf1548d162f6ab07b744bbfc6bf16d1b73c48796fafad6d2516324f05c1732e61e948d7f3ed80f79aa3a88bcd203dcf8528e963959ccc81377dbce10d6c26dce
-
SSDEEP
12288:vU/g01urtavBja+Z1YyoD40OxGEednMXVhipqSS6HKbtxudCY43z:vnrQvB3clZEgnmV8n4btDYmz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ece86d1af9bc8b1e40a8b9213836c9c0_JaffaCakes118
Files
-
ece86d1af9bc8b1e40a8b9213836c9c0_JaffaCakes118.exe .ps1 windows:5 windows x86 arch:x86 polyglot
06fb367ca6e25fc1a0f68fb8e0f203bd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
kernel32
GlobalUnlock
shlwapi
PathFindFileNameW
PathMatchSpecW
SHDeleteKeyA
wnsprintfA
wnsprintfW
wvnsprintfW
user32
CloseWindowStation
DispatchMessageA
DrawIcon
EndDialog
ExitWindowsEx
FindWindowExA
GetClipboardData
GetCursorPos
GetDlgItem
PeekMessageA
SendMessageA
SetThreadDesktop
ToUnicode
Sections
.twrwn Size: 38KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vafkf Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bkn Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ