Static task
static1
Behavioral task
behavioral1
Sample
03e6fa84e4ab6243671f14563aad7b51_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
03e6fa84e4ab6243671f14563aad7b51_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
03e6fa84e4ab6243671f14563aad7b51_JaffaCakes118
-
Size
156KB
-
MD5
03e6fa84e4ab6243671f14563aad7b51
-
SHA1
8e25bf8717f007832ec54a82060ef6a16e748044
-
SHA256
6da5b6896b3181ad14991340d6886cae627aae9bbee58ef2cded692267c1f7ca
-
SHA512
40d014b72f9eb47637d78156bd73bfa884dc7d7e22a243f9b4218c6124e687ac3d685a56b30121c772f8d618f1fffa009c9992fd7d93736e9d90545df8bff5a0
-
SSDEEP
3072:CYiYqa4rWYd3HANohGG6QvXhRAzj8qtDak0ZQRYrKBvevjG2D:CnaA3gNsh6Q3AX8C2/QRYqvqf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03e6fa84e4ab6243671f14563aad7b51_JaffaCakes118
Files
-
03e6fa84e4ab6243671f14563aad7b51_JaffaCakes118.exe windows:4 windows x86 arch:x86
b21361f36a86ac3a67286c727b2bf0f5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
PostThreadMessageW
TranslateMessage
GetMessageW
CharNextW
GetDC
SetTimer
DispatchMessageW
wsprintfW
KillTimer
SendMessageW
CharUpperW
UnregisterClassA
shlwapi
PathCombineW
PathFileExistsW
ole32
CoTaskMemFree
CoRevokeClassObject
CoUninitialize
CoTaskMemRealloc
CoRegisterClassObject
CoInitialize
StringFromGUID2
CoTaskMemAlloc
CoCreateInstance
StringFromCLSID
oleacc
LresultFromObject
CreateStdAccessibleObject
kernel32
GetACP
lstrcpyA
LockResource
lstrlenW
GlobalAlloc
CheckRemoteDebuggerPresent
FindClose
WideCharToMultiByte
EnumResourceNamesA
lstrcpyA
DeleteCriticalSection
GlobalFree
MultiByteToWideChar
GetLastError
InitializeCriticalSection
lstrcmpiW
OutputDebugStringW
GetTickCount
GetCPInfo
lstrcpyW
GetModuleHandleW
Sections
.text Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.isete Size: 1024B - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ