Static task
static1
Behavioral task
behavioral1
Sample
9e41e8aea7a37f6549b4a88419c9c6eb_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9e41e8aea7a37f6549b4a88419c9c6eb_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
9e41e8aea7a37f6549b4a88419c9c6eb_JaffaCakes118
-
Size
456KB
-
MD5
9e41e8aea7a37f6549b4a88419c9c6eb
-
SHA1
34c8af2de06425ac8a5358039497d1e79f88baaa
-
SHA256
6debd5fd5db7f171afb7e13d314719ff56b66128b1e84a49ca8f002d59237aa0
-
SHA512
db0288abd6537b77cbe95b2f59a0ea65a4ba9dd4d793faa8622bfb1f92ad4c7c804806e245f31970fd3beb17fcae89514d747d00cc5026e7c5de8ec9c742453c
-
SSDEEP
12288:Bnqa+fpGWv1A7o+eb9oN+4x6mTvJF+081I/srN:1qxGM1Ae9oN3z+jFrN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 9e41e8aea7a37f6549b4a88419c9c6eb_JaffaCakes118
Files
-
9e41e8aea7a37f6549b4a88419c9c6eb_JaffaCakes118.exe windows:4 windows x86 arch:x86
64753f39243d7bf70e36508cdf4799e3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
MapViewOfFileEx
GetCurrentThreadId
CompareStringW
CreateFileMappingA
OpenMutexA
GetCurrentThread
GetCurrentProcessId
GetCommandLineA
CopyFileA
GetFileType
GetFileAttributesW
DuplicateHandle
CloseHandle
CopyFileW
SetThreadLocale
OpenEventA
GetFileSize
LoadLibraryA
DeleteFileW
GetFileAttributesA
FreeConsole
DeleteFileA
GetACP
CompareStringA
WaitForSingleObject
GetModuleHandleA
OpenSemaphoreA
OpenSemaphoreW
GetStartupInfoA
user32
CreatePopupMenu
CreateMenu
DeleteMenu
FindWindowExW
GetClipboardData
GetWindowTextLengthA
GetWindowTextW
IsWindow
GetWindowTextA
GetMenu
CreateWindowExA
CreateWindowExW
GetClientRect
FindWindowW
FindWindowExA
gdi32
CreateSolidBrush
msvcrt
??2@YAPAXI@Z
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
strcmp
memcpy
printf
strtoul
_exit
??3@YAXPAX@Z
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 236KB - Virtual size: 234KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ