Static task
static1
Behavioral task
behavioral1
Sample
f66f146d4985d7e2c95179a07359c312_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f66f146d4985d7e2c95179a07359c312_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f66f146d4985d7e2c95179a07359c312_JaffaCakes118
-
Size
60KB
-
MD5
f66f146d4985d7e2c95179a07359c312
-
SHA1
73162d63c05b01ff34a731d89a262a8a7135c50a
-
SHA256
298746219801be9a46e08e0cbfae4ee4d0e3f919b81a26b86f97917cd3804a4f
-
SHA512
8656a724e5b7d9e27cc58de6b3b979128511a4a3a3c134d4e5641603e049ca7d93420127fdfdb9282d5074de6195c7c3519b44261bfc95d546c53e2d608d57db
-
SSDEEP
1536:QTMHBkwtKJkwtK9ge9mLUDNa3toN3NTZJ3cGBja2lkc:KGBc2mLuamX1JMEjaz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f66f146d4985d7e2c95179a07359c312_JaffaCakes118
Files
-
f66f146d4985d7e2c95179a07359c312_JaffaCakes118.exe windows:4 windows x86 arch:x86
682c36703d370229cb2e19fabb85580f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
SetLastError
OpenFileMappingA
user32
DrawTextW
DialogBoxParamW
GetFocus
comctl32
ImageList_Draw
DllGetVersion
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 65B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 374B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ