Static task
static1
Behavioral task
behavioral1
Sample
076b7e3b81a9d43a20ea62ed7e4f69d9_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
076b7e3b81a9d43a20ea62ed7e4f69d9_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
076b7e3b81a9d43a20ea62ed7e4f69d9_JaffaCakes118
-
Size
988KB
-
MD5
076b7e3b81a9d43a20ea62ed7e4f69d9
-
SHA1
e6502d50ec8b19149fe4d105d73ba64042babba7
-
SHA256
81ae2baa92d129f836ef139b393c82e9aff97e9b115d817d7af88347c4ab5194
-
SHA512
b05a48d21ac629da8e015dfba7c397b7b464711169a5a8530b41332e34d969e6a1f9c5bea1a734958306b8322875aa4cdbc4d04d25b8102a393ce61d8afc37ab
-
SSDEEP
192:vZZJgP5vTSm93spRvZNtea6aGeFmlociv0svTF7:vwln3spRhNtNZGeciB8svTF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 076b7e3b81a9d43a20ea62ed7e4f69d9_JaffaCakes118
Files
-
076b7e3b81a9d43a20ea62ed7e4f69d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
3a4a4d89001cf8fc965f65bfa6efadff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CancelWaitableTimer
GetLargestConsoleWindowSize
GetUserDefaultLangID
GetConsoleCP
GetModuleHandleA
GetThreadTimes
ReleaseMutex
CreateMutexA
VirtualAlloc
GetOEMCP
TlsFree
AddAtomA
TlsGetValue
GetThreadLocale
SetEvent
GetHandleContext
GetExitCodeThread
GetThreadPriority
CreatePipe
IsDBCSLeadByte
CompareStringA
user32
IsWindowVisible
GetForegroundWindow
GetActiveWindow
ReleaseDC
IsIconic
GetWindow
GetDC
GetClassInfoExA
ValidateRect
GetSystemMetrics
RegisterClassA
GetFocus
GetWindowTextA
GetWindowTextLengthA
CloseWindow
ShowWindow
GetClassNameA
ReleaseDC
InvalidateRect
dsound
DirectSoundEnumerateA
DllCanUnloadNow
DirectSoundCreate
GetDeviceID
DllGetClassObject
mscms
CheckColors
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 968KB - Virtual size: 968KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 40B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ