Static task
static1
Behavioral task
behavioral1
Sample
0989cb6aaccf93bbdf2b2539c37f5c4a_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0989cb6aaccf93bbdf2b2539c37f5c4a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0989cb6aaccf93bbdf2b2539c37f5c4a_JaffaCakes118
-
Size
36KB
-
MD5
0989cb6aaccf93bbdf2b2539c37f5c4a
-
SHA1
f100a05dbb6c0951bfabcb34f92004c43c78f9d3
-
SHA256
c520fe93d22e2e8b8a63e2a448cb235a8d4c706fdac9cbae426e2cf83795bb5f
-
SHA512
315d30f6d49450be4eecb707a6c12c7ec0832136b7ba329f73332c84ceadb8e88b82e8e39acccba5d728dc21455276af7cf34133b61080ad303c595b1c780c35
-
SSDEEP
384:Be9bVUyQKUcIIzUmlJWRixCC3aCFvqrhwooiZTt:BchUBKFIEkiacshwont
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0989cb6aaccf93bbdf2b2539c37f5c4a_JaffaCakes118
Files
-
0989cb6aaccf93bbdf2b2539c37f5c4a_JaffaCakes118.exe windows:4 windows x86 arch:x86
9b96d45f33eda1f4395b31a8aed7b59f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
CloseHandle
CreateFileA
GetProcAddress
FreeLibrary
GetVersion
UnhandledExceptionFilter
GetModuleFileNameA
GetStringTypeA
LCMapStringW
GetStringTypeW
MultiByteToWideChar
LCMapStringA
VirtualAlloc
HeapAlloc
HeapReAlloc
GetACP
GetCPInfo
GetOEMCP
RtlUnwind
HeapFree
WriteFile
HeapCreate
HeapDestroy
VirtualFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
CreateProcessA
ExitProcess
TerminateProcess
GetCurrentProcess
GetEnvironmentStrings
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetStdHandle
GetEnvironmentStringsW
SetHandleCount
GetFileType
user32
EndDialog
SetWindowPos
DestroyWindow
PostQuitMessage
LoadCursorA
DefWindowProcA
LoadIconA
FindWindowA
LoadImageA
RegisterClassExA
SetForegroundWindow
IsIconic
ShowWindow
UnhookWindowsHookEx
MessageBoxA
SetWindowsHookExA
GetWindowRect
DialogBoxParamA
GetSystemMetrics
gdi32
GetStockObject
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE