Static task
static1
Behavioral task
behavioral1
Sample
380e4b185e77ec323a204c9a04c8ea2c_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
380e4b185e77ec323a204c9a04c8ea2c_JaffaCakes118
-
Size
196KB
-
MD5
380e4b185e77ec323a204c9a04c8ea2c
-
SHA1
997336fdf8eb53ab18a42b6e8a124e045b68373c
-
SHA256
11206b0cae5f9a9d3a8fbbd30aacf6055993b250f15b10e274baa5bc8cf708f5
-
SHA512
5cb0e856f0e4b7bcbc314be2f090e7e2c0cca4fa6779e33192818f80b9c41a7dabffe69fd607aee72a5f1b1957d7be3ec606cc80216f6ee2dab67618f2f84cee
-
SSDEEP
3072:OqmnTIvR+b8L88mdDkRjwVub9yVEyaU3nxCWY86bIWLu4Nrme/1ZN:OjIvtLrR2uJyVEyF3C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 380e4b185e77ec323a204c9a04c8ea2c_JaffaCakes118
Files
-
380e4b185e77ec323a204c9a04c8ea2c_JaffaCakes118.exe windows:6 windows x86 arch:x86
ff2d563225e611a3add21254e9961d96
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Heap32First
GetSystemDefaultUILanguage
FreeConsole
GetTickCount
GetCommandLineW
SetCommBreak
FindNextChangeNotification
GetThreadPriority
GetTimeZoneInformation
GetPrivateProfileSectionNamesW
UnregisterApplicationRecoveryCallback
DosDateTimeToFileTime
FillConsoleOutputCharacterA
ExitProcess
CreateSemaphoreW
advapi32
LogonUserA
CreateWellKnownSid
DeleteAce
comdlg32
FindTextW
user32
AddClipboardFormatListener
GetSubMenu
LoadKeyboardLayoutW
GetClipboardViewer
GetClassWord
SetCapture
DefDlgProcW
DefMDIChildProcW
oleaut32
LoadRegTypeLi
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 490B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 267B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-HkVVe|m Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt2 Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pk Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ