Static task
static1
Behavioral task
behavioral1
Sample
0755f9852a5585943fa511cb416bedca_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0755f9852a5585943fa511cb416bedca_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0755f9852a5585943fa511cb416bedca_JaffaCakes118
-
Size
224KB
-
MD5
0755f9852a5585943fa511cb416bedca
-
SHA1
6f4d9fdd1e52c24e2567cc116c7752beb05e3e46
-
SHA256
f5b44505753448aa5e9b9dc802f4a681a3020e32af8cd4b1623ebb5e570e1869
-
SHA512
1ccc5e87c5eb4a1fe265b80f5694f2a2b674be47f3293aa2a64c84623b4b6bf457901dddda134cce06e68cad221fbc6eaa9df88aa08bdfb3b3b53122dbfca7c0
-
SSDEEP
6144:2PSc8Mjl6yECUxoITxmndSbsvYFYcJd193acooOAK9yH8h:2PSc8cl3EC7Mxmnd4sgYW9Ayc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0755f9852a5585943fa511cb416bedca_JaffaCakes118
Files
-
0755f9852a5585943fa511cb416bedca_JaffaCakes118.exe windows:4 windows x86 arch:x86
6a51957de9b0e4168e6d95ca20a780a2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
comdlg32
FindTextA
GetSaveFileNameA
GetOpenFileNameA
kernel32
LoadLibraryExA
GetACP
GetProcAddress
GetCommandLineA
VirtualAlloc
lstrlenA
ExitThread
GetLastError
LoadLibraryA
IsBadHugeReadPtr
LocalAlloc
GetCommandLineW
GetModuleHandleA
comctl32
ImageList_Add
ImageList_Remove
ImageList_Create
ImageList_DrawEx
ImageList_Write
ImageList_Draw
ImageList_Read
ImageList_Destroy
ImageList_DragShowNolock
ImageList_GetBkColor
gdi32
CreateCompatibleDC
Sections
CODE Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 151KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES2 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES7 Size: 1024B - Virtual size: 616B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES3 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES9 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES6 Size: 512B - Virtual size: 466B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES1 Size: 512B - Virtual size: 213B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES8 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ