Static task
static1
Behavioral task
behavioral1
Sample
11fd0a37ce2cae18264f97d873b201a9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
11fd0a37ce2cae18264f97d873b201a9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
11fd0a37ce2cae18264f97d873b201a9_JaffaCakes118
-
Size
25KB
-
MD5
11fd0a37ce2cae18264f97d873b201a9
-
SHA1
a6f4704fb5c00a307db165151bbc13fbb78baa2a
-
SHA256
d20070cc7fcc94a75e031e89b6e5349bc3929de92eb33cc793c18f86e2326e56
-
SHA512
8298b6d1b517a56bbe11550c647406f786ce4d6b2e58a2b7faa2464c3c4b5b5026884def17f4fdb1329699561988e759e83bd4b95c48b4e5193625c43d9107ba
-
SSDEEP
768:dAhWgQ9MsQOqMAq+Kq29V9DE65DICgSf:dA+9MrMaqE6pIm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11fd0a37ce2cae18264f97d873b201a9_JaffaCakes118
Files
-
11fd0a37ce2cae18264f97d873b201a9_JaffaCakes118.exe windows:4 windows x86 arch:x86
648300ceee31715c254dc729c9de8069
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetDefaultCommConfigW
IsValidLocale
GlobalFindAtomA
LocalFlags
EnumDateFormatsExA
ReadConsoleW
SetConsoleLocalEUDC
LocalSize
GetPrivateProfileStructW
CopyLZFile
EnumResourceNamesA
GetFullPathNameA
user32
PostMessageW
SendDlgItemMessageW
PrivateSetDbgTag
LoadKeyboardLayoutA
DialogBoxParamA
RegisterClassA
GetWindowPlacement
SendNotifyMessageA
RemoveMenu
GetThreadDesktop
AnyPopup
CreateDesktopA
SetWindowWord
Sections
.text Size: 22KB - Virtual size: 24KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ