Static task
static1
Behavioral task
behavioral1
Sample
f9d632ae36932a152d2638fb01714608_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f9d632ae36932a152d2638fb01714608_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f9d632ae36932a152d2638fb01714608_JaffaCakes118
-
Size
22KB
-
MD5
f9d632ae36932a152d2638fb01714608
-
SHA1
41b8df60c7c20d4d6766ef3613aafc54b712932d
-
SHA256
c07d85dea9c294321e23e2a2e6afc09977d23668742fef82f05d91098a02c85b
-
SHA512
313e938e410e175e46151ce861fd0afc4534b94cb89694ad8dc4c20ce4e03b9577eb74230b45a27c5fdac1a5ba4412e3a8a65875e1f98ee800c50cc625aea866
-
SSDEEP
384:J0Tj9FtAqpqN7FwAZvPIJofhMCegFH7wWhEDkvkH4NK8SLEHXRRYkqmbMgP0:6NnrqnwAZXIJIh/9FHdE8kH4NrBRYkno
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9d632ae36932a152d2638fb01714608_JaffaCakes118
Files
-
f9d632ae36932a152d2638fb01714608_JaffaCakes118.exe windows:4 windows x86 arch:x86
dfbb40e9670924e3f7ae53f6d7584160
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
GetClipBox
GetBrushOrgEx
CreatePenIndirect
CreateFontIndirectA
GetPixel
CreateHalftonePalette
user32
GetCursor
DrawIcon
DialogBoxParamW
DrawIconEx
GetDlgItem
GetDC
IsMenu
comctl32
ImageList_GetIconSize
DrawStatusText
ImageList_LoadImageW
MenuHelp
CreateStatusWindowW
ImageList_EndDrag
ImageList_Add
ImageList_DrawEx
DrawStatusTextW
ImageList_Draw
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 253KB
IMAGE_SCN_MEM_READ