Static task
static1
Behavioral task
behavioral1
Sample
02090bd81cbe9ddbfd428994d646ad48_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
02090bd81cbe9ddbfd428994d646ad48_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
02090bd81cbe9ddbfd428994d646ad48_JaffaCakes118
-
Size
164KB
-
MD5
02090bd81cbe9ddbfd428994d646ad48
-
SHA1
0e5170ab7b1ee1afb160e4aa3b1202ab92dc8f78
-
SHA256
1e852cd419319d82bf351f6ec98affaa342fcdbe36af726be084970ef92df520
-
SHA512
938590af9abf4c60cc66b8706733b1123220bc4caee9bb15944e94398b6fd9d8203d142ae4f3af189e8af01c2c1b2f2bdb2add444a7199c50d93b63bdc8073e2
-
SSDEEP
3072:7gGNijR1fYYYYY6MN9dcc+bf3yV7qZUbmCYUqz3DUdfQcxV/qQ9ujxdXczqA+Orn:LiNExc93yVqCYB3DAQcJ9FZtr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02090bd81cbe9ddbfd428994d646ad48_JaffaCakes118
Files
-
02090bd81cbe9ddbfd428994d646ad48_JaffaCakes118.exe windows:4 windows x86 arch:x86
0172fd6fb10e76016917927ff6b3f9c3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleCP
HeapReAlloc
GetCommandLineA
CompareFileTime
WaitForSingleObject
CloseHandle
GlobalUnlock
VirtualProtect
WaitForMultipleObjects
GetSystemDefaultLangID
HeapCreate
GetModuleHandleA
GetTickCount
SuspendThread
GetStdHandle
LoadLibraryExA
GetVersion
AddAtomA
GetProfileIntA
InterlockedExchange
lstrlenA
user32
EqualRect
EnableScrollBar
PaintDesktop
CopyRect
CreateCursor
DispatchMessageA
ModifyMenuA
GetMenuStringA
SubtractRect
GetKeyState
DialogBoxParamA
TranslateMessage
ShowWindow
UpdateWindow
SetPropA
CreateCaret
GetKeyboardLayout
DestroyMenu
FindWindowA
MessageBoxA
SetWindowPos
GetWindowTextA
InsertMenuA
PostMessageA
GetDlgItem
atl
AtlAdvise
AtlGetVersion
AtlUnadvise
AtlSetErrorInfo
AtlModuleInit
dnsapi
DnsStatusString
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 768KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ