Static task
static1
Behavioral task
behavioral1
Sample
0b05045743fe605dade04ff8d3b73517_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0b05045743fe605dade04ff8d3b73517_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0b05045743fe605dade04ff8d3b73517_JaffaCakes118
-
Size
48KB
-
MD5
0b05045743fe605dade04ff8d3b73517
-
SHA1
d49243978cfa578ea44ddf6fd7883edab65031ce
-
SHA256
0b9229f626952fff6a2e87f49d6f61d7df57a96907c133e0fd7229d521c9e12f
-
SHA512
f713f505d9be62e70c957481656eada79a243e1492862da8ff06dd31a09f3ea52fd0aa7869add8a2d6bf826a335869043639e6ac0d75e08fd0731d1296f1f236
-
SSDEEP
768:LQwO5GQzraWADFxzRxkEFjCZtldlJM222b1CxQMpuJcmPt:8wOkqWWApxzRxZgtldlJMXBoPt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b05045743fe605dade04ff8d3b73517_JaffaCakes118
Files
-
0b05045743fe605dade04ff8d3b73517_JaffaCakes118.exe windows:4 windows x86 arch:x86
8b4b4337826102f1180c2ee08ab63fe9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBeep
GetTopWindow
DialogBoxParamA
ArrangeIconicWindows
CharUpperA
IsIconic
SetFocus
CharNextA
FlashWindow
GetSystemMetrics
LoadCursorA
CreateWindowExA
UpdateWindow
EnableWindow
SetCursorPos
CharLowerA
KillTimer
GetSysColorBrush
SetTimer
GetDesktopWindow
ReleaseDC
kernel32
lstrcatA
GlobalDeleteAtom
SetLastError
lstrlenA
GetConsoleCP
LoadLibraryA
GetProcAddress
FreeLibrary
GetLastError
GlobalFindAtomA
FreeConsole
GetCommandLineA
GetConsoleOutputCP
FindResourceA
GlobalAddAtomA
OutputDebugStringA
CopyFileA
Sleep
shell32
ShellAboutA
gdi32
GdiFlush
CreateCompatibleDC
GetObjectA
SetBkColor
EndPage
CreateSolidBrush
ole32
CoFreeAllLibraries
CoGetCurrentProcess
comctl32
InitCommonControls
FlatSB_ShowScrollBar
MakeDragList
FlatSB_GetScrollPos
GetEffectiveClientRect
DrawInsert
FlatSB_GetScrollRange
FlatSB_GetScrollProp
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ