Static task
static1
Behavioral task
behavioral1
Sample
08be9ae74b43071bf305983301c47784_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
08be9ae74b43071bf305983301c47784_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
08be9ae74b43071bf305983301c47784_JaffaCakes118
-
Size
392KB
-
MD5
08be9ae74b43071bf305983301c47784
-
SHA1
73b93d28aa1b1625ca993040c60ecb5dd5885026
-
SHA256
e1372166f99525d89d0c5ea07d664537e558d4a3db29602f153d173e49b89b5c
-
SHA512
6e86e38162e3cb042f7178dffe2dc31358d7643f2a2f7bbc5f8f44e7e9e3e58587f25faf0b1f613640f35a618cac423b06d50cb9ed02238a6ed57f1673aafff1
-
SSDEEP
6144:KvDp+FxAgek1C3EpduJFYRjTuaJfrv/0wEfYC9TbyrMiMDeEic2U9uKZEW/Oz:0kFe6CFkZZVryf9RlDLiPUwKla
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08be9ae74b43071bf305983301c47784_JaffaCakes118
Files
-
08be9ae74b43071bf305983301c47784_JaffaCakes118.exe windows:4 windows x86 arch:x86
91c6fbdf11cb0cfe8f2c80a5c6f9d279
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleCP
CloseHandle
CreateFileMappingA
FindClose
FindAtomA
GetLastError
LocalLock
WaitForSingleObjectEx
GetCalendarInfoA
GlobalUnlock
CreateFileA
GetACP
HeapCreate
FreeEnvironmentStringsA
TlsGetValue
LoadLibraryExA
LocalFree
Sleep
GetConsoleAliasA
GetModuleHandleA
user32
GetIconInfo
GetDlgItem
DrawTextA
SetFocus
CreateDialogParamA
IsWindow
DispatchMessageA
CallWindowProcA
GetMessageA
GetDC
CascadeWindows
DrawEdge
DefWindowProcA
MessageBoxA
msasn1
ASN1BERDecNull
ASN1BEREncFlush
ASN1BERDecCheck
ASN1BERDecEoid
ASN1BEREncLength
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ