Static task
static1
Behavioral task
behavioral1
Sample
1194c9c9174361abb14f1d816df730da_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
1194c9c9174361abb14f1d816df730da_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1194c9c9174361abb14f1d816df730da_JaffaCakes118
-
Size
343KB
-
MD5
1194c9c9174361abb14f1d816df730da
-
SHA1
77481d94fef5a25bf52df0808caf34ba48a57c2a
-
SHA256
a94188b03a2e2e9cb8fad531e9c6488484c828733bd637a8ecd9ba3826d4a56d
-
SHA512
66a925191ef1dd27dc6d32830602e0f18fb15b603f5248d904600f8f90f65262572101a446672f6f5003b10624264fa1ab8b376ca8b94e762b5a77b12b0e64c2
-
SSDEEP
6144:DL6T1+1qUtoovkRBLcFdVGainZswIbvA2gJ4MgJ8gF3dNWM24w0U+cUw2OFe6xVg:DLHdt5PVGainezbv3+cJ8gF3dI4XdcxE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1194c9c9174361abb14f1d816df730da_JaffaCakes118
Files
-
1194c9c9174361abb14f1d816df730da_JaffaCakes118.exe windows:4 windows x86 arch:x86
a90fba923f78c07d04ba9d32972483cc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetTickCount
FreeLibrary
GetLastError
CreateEventA
CloseHandle
LocalFree
user32
GetMessageA
GetWindowRect
DispatchMessageA
DefWindowProcA
GetFocus
EndPaint
SetWindowTextA
msvcrt
wcslen
_adjust_fdiv
__CxxFrameHandler
wcstoul
__setusermatherr
_initterm
toupper
_controlfp
wcschr
Sections
.text Size: 1024B - Virtual size: 943B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 1014B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrs Size: 75KB - Virtual size: 155KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ