Static task
static1
Behavioral task
behavioral1
Sample
009d6e805b1644f5932bb5ed4916f0f4_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
009d6e805b1644f5932bb5ed4916f0f4_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
009d6e805b1644f5932bb5ed4916f0f4_JaffaCakes118
-
Size
210KB
-
MD5
009d6e805b1644f5932bb5ed4916f0f4
-
SHA1
def97d80dd89e3e2a17286c1838b91f6b68cabf8
-
SHA256
27829a29dfeb312f95f1638c2462b81f5eb1296d8f40ac1e487499a4a5a924f9
-
SHA512
0c39a8b78e358b98be09523359868414d580f23a1b936a18b94d23ad880149a4781583dca1e02dee080769bc4e0ba74439c06d7f381eaff8df440e9d969134fd
-
SSDEEP
3072:gnjJsXyxC000fzoG6243wbohfUTcNDt1qidN6UTzXaFbYXfGg++:gnjpxC000f8G6BAb2NDt1qidnnXo4++
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 009d6e805b1644f5932bb5ed4916f0f4_JaffaCakes118
Files
-
009d6e805b1644f5932bb5ed4916f0f4_JaffaCakes118.exe windows:4 windows x86 arch:x86
9d6119ac030e316fb66ffe6839000cb2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDefaultLangID
GetModuleHandleA
GlobalUnlock
HeapCreate
CompareFileTime
WaitForSingleObject
GetStdHandle
SetConsoleCP
GetConsoleCP
SuspendThread
CloseHandle
WaitForMultipleObjects
HeapReAlloc
VirtualProtect
LoadLibraryExA
GetTickCount
lstrlenA
GetCommandLineA
InterlockedExchange
GetVersion
GetAtomNameA
user32
GetKeyState
DestroyMenu
IsDialogMessage
GetDlgItem
SetPropA
InvertRect
DragObject
FindWindowA
InsertMenuA
DialogBoxParamA
SetScrollInfo
CreateIcon
DispatchMessageA
CopyImage
SetWindowPos
EnableScrollBar
CreateMenu
DrawCaption
GetCursorInfo
FillRect
GetKeyboardLayout
advapi32
RegQueryInfoKeyA
RegCloseKey
RegCreateKeyExA
RegEnumValueA
RegEnumKeyA
apphelp
ApphelpCheckExe
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 808KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ