Static task
static1
Behavioral task
behavioral1
Sample
114791aec0a3dd81878f71e3da6ebe68_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
114791aec0a3dd81878f71e3da6ebe68_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
114791aec0a3dd81878f71e3da6ebe68_JaffaCakes118
-
Size
157KB
-
MD5
114791aec0a3dd81878f71e3da6ebe68
-
SHA1
8515466862d3d8d3d18eb2f04089cea22e45c952
-
SHA256
09a7f326371708e89f5f8c2d68766ba0fb039942a38c1ac41b081b7647acb206
-
SHA512
753213174b5823413804cf8499a15bdec0dc8eca88c6123d767ac68cdf78cb8e65cbd7ebe9b24595452aff9079565f2e6732d6fcd1df56e6edec4df33d785ebe
-
SSDEEP
3072:sIv8IJ3hAlUhJ5N9tnIgzEmeT58zJLyY0sSS9M+:siJ3hAlcJ5NvnIgzEfqJLyY8S9M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 114791aec0a3dd81878f71e3da6ebe68_JaffaCakes118
Files
-
114791aec0a3dd81878f71e3da6ebe68_JaffaCakes118.exe windows:4 windows x86 arch:x86
0cf189b0a526c1423885ee43c0933f3a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
GetLengthSid
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
gdi32
SaveDC
SetPixel
CreateCompatibleBitmap
GetDIBits
SetTextColor
user32
GetClassLongA
GetSystemMetrics
GetIconInfo
IsWindowVisible
GetCursor
EnumChildWindows
IsIconic
shell32
SHGetSpecialFolderLocation
kernel32
ExitProcess
GetProcAddress
VirtualAllocEx
VirtualAlloc
GlobalAlloc
ExitThread
GetVersionExA
GetModuleHandleA
comctl32
ImageList_Destroy
ImageList_Create
ImageList_Add
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 753B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 133KB - Virtual size: 229KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE