Static task
static1
Behavioral task
behavioral1
Sample
05b80ad928e2700a7baff6b72cd821ba_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
05b80ad928e2700a7baff6b72cd821ba_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
05b80ad928e2700a7baff6b72cd821ba_JaffaCakes118
-
Size
316KB
-
MD5
05b80ad928e2700a7baff6b72cd821ba
-
SHA1
d257a63e4a870d92534d533006d1b647e53ace7f
-
SHA256
cc1e6bed1c3b7814c8a60e43905b36ef1dd22c9cdf3355f81974ac34f2321986
-
SHA512
1cb277bfc504fd83f4672529393d8c3e9eb8812955fc1da41faee301f1b44472a8edda08fe11481809ecc39a8a6e3669c3696aaa978bfcbffae6b06357a2dc1f
-
SSDEEP
6144:/ahgMbyt+/lFO7UXdj5hcD28Ek5k+6GGv+H1wpZnjZr0J/x:ChgxtAA70R5uq89H6EHe3pUx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05b80ad928e2700a7baff6b72cd821ba_JaffaCakes118
Files
-
05b80ad928e2700a7baff6b72cd821ba_JaffaCakes118.exe windows:4 windows x86 arch:x86
987d74abebeae2d3b6d4e4f908e14b85
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsDebuggerPresent
GetEnvironmentStringsA
GlobalFree
VirtualProtect
GetModuleHandleA
HeapCreate
FlushFileBuffers
GetExpandedNameA
GetCurrentThread
GetSystemDirectoryA
GetCurrentProcess
WriteConsoleA
FormatMessageA
GetCurrentProcessId
FindAtomA
GetCompressedFileSizeA
GetACP
InterlockedExchange
GetThreadPriority
GetStdHandle
OpenSemaphoreA
user32
GetWindow
GetCursorPos
SetActiveWindow
IsIconic
GetParent
SetForegroundWindow
EndPaint
GetWindowTextLengthA
FillRect
BeginPaint
FrameRect
ValidateRgn
GetClassNameA
ReleaseDC
ShowWindow
GetDlgItem
wsprintfA
GetFocus
DrawTextA
linkinfo
ResolveLinkInfoA
GetLinkInfoData
GetCanonicalPathInfoA
IsValidLinkInfo
DestroyLinkInfo
rtutils
LogEventW
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ