Static task
static1
Behavioral task
behavioral1
Sample
0995eca90b02ace9fe88feeb5d6b6dc4_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0995eca90b02ace9fe88feeb5d6b6dc4_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0995eca90b02ace9fe88feeb5d6b6dc4_JaffaCakes118
-
Size
391KB
-
MD5
0995eca90b02ace9fe88feeb5d6b6dc4
-
SHA1
fb55480dc0a9e65bd73eedd3828e56273a21af8f
-
SHA256
6541917e6e7b7f49da21308357b182c2fba0b2284f8301d24b36a8a150d2edf8
-
SHA512
a01475bb98cc1e90e2c89ce0e120a29234a1001ebf42ab58c1d650351580cf080966d4d17a1ac1d55c9dc171d9c118728312d93e6fce888f2d5082f68245ab3f
-
SSDEEP
12288:bMGLLRMNKHEAJLjpFv6w2K/PkFtlVMHFWg1EOfoMzCc3Sa0n:PRM4kAJLjpFvN/ytkjEOfoMWN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0995eca90b02ace9fe88feeb5d6b6dc4_JaffaCakes118
Files
-
0995eca90b02ace9fe88feeb5d6b6dc4_JaffaCakes118.exe windows:4 windows x86 arch:x86
32bace558a1feaad6430a37b531d53e1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
FindAtomA
GetEnvironmentVariableW
ReleaseMutex
GetCurrentThreadId
LocalFree
InitializeCriticalSection
CreateEventW
IsBadStringPtrW
WriteFile
GlobalFlags
HeapCreate
GetCurrentProcessId
GetDriveTypeA
ReleaseMutex
GetFileTime
lstrlenW
GetPrivateProfileStringA
FindClose
LoadLibraryW
user32
DrawTextA
SetFocus
CreateWindowExA
GetClassInfoA
IsWindow
GetKeyboardType
DrawStateW
GetClientRect
DispatchMessageA
GetSysColor
EndDialog
GetSysColor
CallWindowProcW
rastapi
DeviceDone
DeviceDone
DeviceDone
DeviceDone
DeviceDone
advapi32
InitializeSid
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 381KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ