Static task
static1
Behavioral task
behavioral1
Sample
634784dd9101f7576455d01c9bece554_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
634784dd9101f7576455d01c9bece554_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
634784dd9101f7576455d01c9bece554_JaffaCakes118
-
Size
356KB
-
MD5
634784dd9101f7576455d01c9bece554
-
SHA1
601bfc3ade8c994b8147f15c449fe556622109b2
-
SHA256
eccc59b057a8c4e931a60c0fdcb23d229d203d91b9b2248b3143a24d0a16a658
-
SHA512
194bd29fc6ce541e47716d5fedeac675524581bb0c08e5bba0685f699baff406638f30fade317cbe2e0ebe030b0c3cac68ae932d895aa68d4182816dd743b242
-
SSDEEP
6144:Sae/c0RVIqxFu4s2a9XHCd9hxJamsAT4k+wCGbfQfojzMBR5j:W/cMVDxFu43cHYf1TPCAxjzMx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 634784dd9101f7576455d01c9bece554_JaffaCakes118
Files
-
634784dd9101f7576455d01c9bece554_JaffaCakes118.exe windows:4 windows x86 arch:x86
af1f0d2de1aa75deb87be3cccb118fb6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenEventW
OpenMutexA
CloseHandle
MapViewOfFileEx
DosDateTimeToFileTime
CreateFileMappingA
SetLocaleInfoA
OpenEventA
GetFileSize
GetFileType
GetModuleHandleA
GetModuleHandleW
CopyFileA
CompareStringW
WaitForSingleObject
FindClose
GetCurrentThreadId
FreeConsole
GetCommandLineA
GetCurrentProcessId
GetFileAttributesW
LoadLibraryA
SetThreadLocale
DuplicateHandle
OpenMutexW
CreateFileA
OpenSemaphoreA
SetStdHandle
SetFilePointer
FlushFileBuffers
GetProcAddress
GetOEMCP
GetCPInfo
GetACP
GetFileAttributesA
GetStartupInfoA
GetVersion
ExitProcess
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
HeapAlloc
HeapFree
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
DeleteCriticalSection
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
InitializeCriticalSection
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
user32
GetClipboardData
GetWindowTextA
GetWindowTextLengthW
GetMenu
FindWindowExW
GetWindowTextW
CreatePopupMenu
CreateMenu
FindWindowA
GetWindowTextLengthA
GetClientRect
CreateWindowExW
CreateWindowExA
gdi32
CreateSolidBrush
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 304KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ