Static task
static1
Behavioral task
behavioral1
Sample
1559edef4fef1f409225b50e4afb8ebb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1559edef4fef1f409225b50e4afb8ebb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1559edef4fef1f409225b50e4afb8ebb_JaffaCakes118
-
Size
257KB
-
MD5
1559edef4fef1f409225b50e4afb8ebb
-
SHA1
4b1d1293064bd1c31bd99c45fa68eb85b8e37498
-
SHA256
eed40c04d2d8baf9fd03717c50df0837d328cdd530fd188db95a4e7ee1706486
-
SHA512
e4107ac0de2e8cac074db71723bfa3a396ed799d656efa0944cb66d8f1759e01cac861608b688172bcafee40da3a39037b9a1bddb96d7bbea5252ba07229b15e
-
SSDEEP
6144:+jzCeR0Ukt4OYfxxe7v/IDmT0JgO2xuH:KewOCz6SmTvO2S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1559edef4fef1f409225b50e4afb8ebb_JaffaCakes118
Files
-
1559edef4fef1f409225b50e4afb8ebb_JaffaCakes118.exe windows:4 windows x86 arch:x86
e595ff192b0bd4efdfad309be0ba3241
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
CopyFileW
DeleteFileA
GetShortPathNameA
GetProcessHeap
LocalFree
FreeLibrary
RemoveDirectoryA
GetStdHandle
lstrcpynA
CopyFileA
GlobalLock
GetLastError
GetModuleFileNameW
CloseHandle
ExitProcess
GetModuleHandleW
DeleteFileW
SetFileAttributesW
GetModuleFileNameW
GlobalFree
GlobalUnlock
CompareStringW
SetFileAttributesA
GlobalAlloc
RemoveDirectoryW
FormatMessageA
GetModuleFileNameA
GetShortPathNameW
GetModuleHandleA
ExitProcess
LoadLibraryA
dciman32
DCIBeginAccess
user32
GetLastActivePopup
GetWindowRect
SetForegroundWindow
IsIconic
SetRect
EnumWindowStationsW
ShowWindow
GetClientRect
Sections
.text Size: 181KB - Virtual size: 181KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bore Size: 5KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ