Static task
static1
Behavioral task
behavioral1
Sample
1008b5626d79c1a14f19cfe92a380ac4_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1008b5626d79c1a14f19cfe92a380ac4_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1008b5626d79c1a14f19cfe92a380ac4_JaffaCakes118
-
Size
314KB
-
MD5
1008b5626d79c1a14f19cfe92a380ac4
-
SHA1
68bff3161dad52af19bbda933b73b63ec69e7a48
-
SHA256
ee4c9ac78a1876e33a0ed1dcf6295c502dae13a2adde39cfc51fb3fa7bb7aa62
-
SHA512
bbc41377f53b64a4baf750f8caf61d28b0dbbcde6cf55ab5ed36ad293942b36d08213fa52c14b5d46742daf9228da06bb2a1aa113e0917e7c2340a65bac209f9
-
SSDEEP
6144:i455h1Ac5RGffk9NCEqNcrWJYmzGPfsf0b2JcjXufn2fdDykh:R5ocWff0riYmCPXLK2F/h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1008b5626d79c1a14f19cfe92a380ac4_JaffaCakes118
Files
-
1008b5626d79c1a14f19cfe92a380ac4_JaffaCakes118.exe windows:4 windows x86 arch:x86
1b85afec097ff466f832487bf9e3bd22
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalLock
GetOEMCP
lstrcpyn
GlobalAddAtomA
LocalSize
GlobalCompact
LoadLibraryExA
GetStdHandle
GlobalFree
VirtualAlloc
CloseHandle
RaiseException
LoadResource
GlobalFindAtomA
DeleteAtom
GetProfileStringA
GetCommState
GetProcessHeap
ExitThread
EnterCriticalSection
ClearCommBreak
user32
EndPaint
GetWindowTextA
AlignRects
GetForegroundWindow
GetDC
GetWindowTextLengthA
GetClassNameA
DrawEdge
ValidateRect
GetActiveWindow
ShowWindow
ReleaseDC
IsIconic
CloseWindow
GetClassInfoExA
GetParent
BeginPaint
GetWindow
GetFocus
wsock32
WSAGetLastError
WSACleanup
WSAStartup
WSAAsyncGetServByPort
WSASetBlockingHook
duser
AutoTrace
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ