Static task
static1
Behavioral task
behavioral1
Sample
00ed4d9b49b61f627bca17f017db5885_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
00ed4d9b49b61f627bca17f017db5885_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
00ed4d9b49b61f627bca17f017db5885_JaffaCakes118
-
Size
226KB
-
MD5
00ed4d9b49b61f627bca17f017db5885
-
SHA1
56fa4cbbcaad586c6b10b6f3dcc31956023bdea2
-
SHA256
dffac84634598cc9e571f9019928c1b42bd3f3dc4fb923dfd19e0b29e6122a28
-
SHA512
6f8a329894b8a287258f6e321083b0544d74e7e09e90b160e9740be4f05f94f97c1c5090c5ac009d21731800bd1f2ceb6002a7f00c493d745f08dfb1554dfd71
-
SSDEEP
6144:C1jCm/ic5Ti+gIqujf3l0q65Ze0ntkEjRWX0A41B:Cpp/Y+g1ujf3x6Lntd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00ed4d9b49b61f627bca17f017db5885_JaffaCakes118
Files
-
00ed4d9b49b61f627bca17f017db5885_JaffaCakes118.exe windows:4 windows x86 arch:x86
c8e1eb1221d8cbe68166610aa5018a6b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
PeekMessageW
PostMessageA
LoadStringA
OffsetRect
RegisterClassA
ReleaseCapture
RedrawWindow
gdi32
CopyEnhMetaFileA
CreateBitmap
BitBlt
GetCurrentPositionEx
SelectPalette
shell32
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHFileOperationA
SHGetFolderPathA
DragQueryFileA
kernel32
GetCommandLineA
LoadLibraryA
GetModuleHandleA
lstrlenA
VirtualAllocEx
ExitProcess
ExitThread
GetLastError
LoadLibraryExA
GetVersionExA
GetProcAddress
IsBadHugeReadPtr
Sections
CODE Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 142KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RSRC2 Size: 1024B - Virtual size: 553B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RSRC6 Size: 512B - Virtual size: 453B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RSRC8 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RSRC1 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RSRC9 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RSRC3 Size: 1024B - Virtual size: 957B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RSRC4 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 932B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ