Static task
static1
Behavioral task
behavioral1
Sample
6a5361ff62a6729d5a09dc414c505197_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
6a5361ff62a6729d5a09dc414c505197_JaffaCakes118
-
Size
148KB
-
MD5
6a5361ff62a6729d5a09dc414c505197
-
SHA1
be4452e4f29851235f2edc5acf6cd58420ad26a9
-
SHA256
32f425cfbcc7ca76057c6ccc0ea5e0f27a59f7d276213036e72f8b614b360027
-
SHA512
4d28d5c59a592bc020520cb82c7b297d67928f8445994d036be78f3e044e591c76e91820d47fa07136f9982ef79202f0f065c1c6c9079438738cd0575f57c27f
-
SSDEEP
3072:4zbYMMZQD4tI5SBUq+0lQMhp6O72Xo2EEBWU:4zcWDzSBUSD3R2Xo2Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a5361ff62a6729d5a09dc414c505197_JaffaCakes118
Files
-
6a5361ff62a6729d5a09dc414c505197_JaffaCakes118.exe windows:6 windows x86 arch:x86
e78dae2354a0477b32bcbf697f73d0bb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
VarCyFromI1
wininet
InternetOpenUrlW
user32
GetCursorPos
GetKeyboardType
BeginDeferWindowPos
GetMenuItemRect
GetFocus
kernel32
ReadFile
CancelSynchronousIo
GetCommandLineA
TlsFree
GetSystemTimeAsFileTime
IsProcessInJob
GetLastError
GetTapeStatus
GetTickCount
GlobalAlloc
rpcrt4
I_RpcServerSetAddressChangeFn
gdi32
SetBitmapDimensionEx
PaintRgn
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qdata Size: 4KB - Virtual size: 182B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WET_J Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
43B Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
o Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ