Static task
static1
Behavioral task
behavioral1
Sample
366ffcdf488d36cbb93126d9f27964f3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
366ffcdf488d36cbb93126d9f27964f3_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
366ffcdf488d36cbb93126d9f27964f3_JaffaCakes118
-
Size
105KB
-
MD5
366ffcdf488d36cbb93126d9f27964f3
-
SHA1
7ebb6740bebd22192b7b117fe06562ca7f97b6d2
-
SHA256
c562b18d162e106f6e68ba8f164ddfd181883eb408e8148eb2376e1b605879c5
-
SHA512
6bbf2e50489cf0e8903b5f257159a1836202ee7f9cff3aaad30d9230d3515198deba11b7d78fc0806831b9e21f7c0ff8527eea068d6a870c1a24d18e47a99129
-
SSDEEP
3072:5CQ++dHHrNpBSYQMcjZxcptz0a1o0/PQ63r7S4El:/++5rvAnjcptH/Pl33pM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 366ffcdf488d36cbb93126d9f27964f3_JaffaCakes118
Files
-
366ffcdf488d36cbb93126d9f27964f3_JaffaCakes118.exe windows:4 windows x86 arch:x86
d1e53269200d8bc85d34b5db17700753
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
ExitProcess
user32
MessageBeep
comctl32
ImageList_Add
gdi32
CreateCompatibleDC
SelectObject
GetObjectA
StretchBlt
gdiplus
GdipSetAdjustableArrowCapWidth
GdipGetAdjustableArrowCapFillState
GdipCreateAdjustableArrowCap
Sections
.text Size: 1024B - Virtual size: 532B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 532B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE