Static task
static1
Behavioral task
behavioral1
Sample
019a311736a0979c1ae1f6aefd28e92f_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
019a311736a0979c1ae1f6aefd28e92f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
019a311736a0979c1ae1f6aefd28e92f_JaffaCakes118
-
Size
12KB
-
MD5
019a311736a0979c1ae1f6aefd28e92f
-
SHA1
74c1cb73a800d971c3a104ec422b113fc2e127dd
-
SHA256
c8079c4d3b1fa7c95ca34a8ddc20eaf0429f123967395c5cdf9a4142bb00f261
-
SHA512
d8e2789cb76b3468193cfff8b24edebe15709cbf6982476d4c919745619a1780ffc0cfbb36fff2896879efbaf3fda40ab6ca514ffff76d5c1bcc2465e7f83840
-
SSDEEP
192:QSbupCVVQBGgPRwHG1dH2LViG+XsSJcfClRuo8Nn2VyszFGm0Sn8g+8xoZYl9wm/:dbAVXdn1/l562PEUywh0U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 019a311736a0979c1ae1f6aefd28e92f_JaffaCakes118
Files
-
019a311736a0979c1ae1f6aefd28e92f_JaffaCakes118.exe windows:4 windows x86 arch:x86
a5e9e6bee1001a94803d3a78b5af0e69
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
PeekMessageA
TranslateMessage
DispatchMessageA
LoadCursorA
RegisterClassExA
CharUpperBuffA
RegisterClassA
DefDlgProcA
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
LoadIconA
EnableWindow
SetWindowTextA
DefWindowProcA
PostQuitMessage
kernel32
GetStartupInfoA
GetCommandLineA
GetProcessHeap
GetModuleHandleA
CreateThread
lstrcmpiA
EnterCriticalSection
ResetEvent
LeaveCriticalSection
WaitForMultipleObjects
GetTickCount
ExitProcess
Sleep
SetFilePointer
ReadFile
HeapAlloc
CloseHandle
CreateFileA
lstrlenA
GetModuleFileNameA
lstrcmpA
lstrcpyA
SetEvent
CreateEventA
InitializeCriticalSection
rasapi32
RasSetEntryPropertiesA
RasEnumEntriesA
RasGetEntryPropertiesA
RasDialA
RasEnumDevicesA
RasHangUpA
RasEnumConnectionsA
RasGetConnectStatusA
RasGetErrorStringA
comctl32
ord17
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE