Static task
static1
Behavioral task
behavioral1
Sample
f31b985e361f3a88d2ea74f944c0ba80_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f31b985e361f3a88d2ea74f944c0ba80_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f31b985e361f3a88d2ea74f944c0ba80_JaffaCakes118
-
Size
22KB
-
MD5
f31b985e361f3a88d2ea74f944c0ba80
-
SHA1
76fb08880035c49e75d8bb9c2ba8e0013bf4f722
-
SHA256
8e592c7a57d8e3356942740643a271efbc96c4237cd64bed769ac7723b30138c
-
SHA512
db8d41e623a82ee52fae2dc2907a8f802073e1a441fbb9c1c166187168581893b769c4df98f92c6bfce2553194ebf25c80aef527a9822eab339e4f013684bd55
-
SSDEEP
192:7jHpKv+vXkzmMks9CT/TQOR+V+qaxhDnBQub06J1qC4J/1DG:7jJKv+vXkXkAMtcV1ajBD0u1qC4Jp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f31b985e361f3a88d2ea74f944c0ba80_JaffaCakes118
Files
-
f31b985e361f3a88d2ea74f944c0ba80_JaffaCakes118.exe windows:4 windows x86 arch:x86
08959803ab490e253faec52f5d6c0ab4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
CloseHandle
GetModuleHandleA
lstrlenA
lstrcpyA
GetStdHandle
LocalAlloc
Sleep
GetStartupInfoA
GlobalFree
GetFileSize
GetTickCount
GetVersionExA
GlobalAlloc
FreeLibrary
LocalFree
GetLastError
lstrcatA
GetCommandLineA
msvcrt
_acmdln
wcstoul
exit
_XcptFilter
wcschr
wcslen
_initterm
_exit
__p__commode
gdi32
SelectObject
GetDeviceCaps
CreateCompatibleDC
SetPixel
ExtTextOutA
GetPixel
GetTextMetricsA
GetBkColor
GetTextExtentPoint32A
SetBkMode
SetROP2
GetObjectA
MoveToEx
DeleteObject
LineTo
BitBlt
GetTextColor
PatBlt
CreateSolidBrush
user32
ShowWindow
PostQuitMessage
BeginPaint
DialogBoxParamA
DefWindowProcA
EndDialog
GetSysColor
GetFocus
TranslateMessage
LoadIconA
DispatchMessageA
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ