Static task
static1
Behavioral task
behavioral1
Sample
cbb12b1abd614fd51ba65b366f222a12_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
cbb12b1abd614fd51ba65b366f222a12_JaffaCakes118
-
Size
132KB
-
MD5
cbb12b1abd614fd51ba65b366f222a12
-
SHA1
3a21532ae26c9c1b618934c39c20621fcef61488
-
SHA256
f5e1c6d6d9bd26a6d0ae3b8657030dd40138e0371b824013821f48302e3f67f3
-
SHA512
c9b3c3ade5f3e690fc43bf144fabc79abb19fc9810791c2ada373afaaceed78d59c07020a5cf51cc65bbf75c2676e4d19deae610a5a592e0c2cf034167f50265
-
SSDEEP
3072:eRsifov/GROZieGy55DDKmUQLkh6kkD4REow1e9q6:GrfHsxLDOmUQLkYkaowU9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cbb12b1abd614fd51ba65b366f222a12_JaffaCakes118
Files
-
cbb12b1abd614fd51ba65b366f222a12_JaffaCakes118.exe windows:6 windows x86 arch:x86
6f02dc867d11f93a243e254fbad68629
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetKeyState
IsWindow
GetClipboardOwner
GetScrollPos
SetCapture
SetCaretPos
esent
JetCloseTable
kernel32
GetUserDefaultLocaleName
GetCommandLineW
lstrcmpW
Sections
sijJ Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.mr Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CONST Size: 92KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
J Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ