Static task
static1
Behavioral task
behavioral1
Sample
062b2fdcb0f057d9593d1e8671dde6ad_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
062b2fdcb0f057d9593d1e8671dde6ad_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
062b2fdcb0f057d9593d1e8671dde6ad_JaffaCakes118
-
Size
174KB
-
MD5
062b2fdcb0f057d9593d1e8671dde6ad
-
SHA1
3a578989e5b355d6e7b85284185c813e1bff7505
-
SHA256
c47115a47f4239e1c2c17b8449bee36fd1cc7d06fcc96c015ca8cc771cea5f0e
-
SHA512
bfd794eb614a88c64a3fb181eec98403f3f0288483e4ac3dc9f2280cd64bbced3508fc4e291c401a0ea10db16fd4fdd51a5d9e512bae1785b9eaa6df5aa7b1de
-
SSDEEP
3072:IcvX18z6jaMqlzYTNr04yjshvWEEDopkQ8Do6WqTbBDctL+sp0hm08Dcn:9P26LoYezshvHJpktDBWaED0hm08
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 062b2fdcb0f057d9593d1e8671dde6ad_JaffaCakes118
Files
-
062b2fdcb0f057d9593d1e8671dde6ad_JaffaCakes118.exe windows:4 windows x86 arch:x86
c6c925decefa22c9a6a812496b436fcd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EnumChildWindows
GetDlgItem
SendMessageA
CreateWindowExW
IsWindow
DestroyWindow
GetWindowThreadProcessId
rpcrt4
UuidCreate
ole32
CoGetMalloc
CoSetProxyBlanket
CoCreateInstance
CoQueryProxyBlanket
CoInitializeEx
CoUninitialize
CoTaskMemFree
CoInitializeSecurity
StringFromGUID2
kernel32
GetCalendarInfoW
RaiseException
HeapCreate
IsValidCodePage
ReadFile
HeapDestroy
VirtualAlloc
LeaveCriticalSection
SetFilePointer
SetEndOfFile
GetStartupInfoA
EnumResourceNamesA
InitializeCriticalSection
EnterCriticalSection
DeleteCriticalSection
ExitProcess
FreeEnvironmentStringsA
RtlUnwind
GetCPInfo
HeapReAlloc
VirtualFree
GetOEMCP
GetACP
HeapSize
SetEnvironmentVariableA
Sections
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ