Static task
static1
Behavioral task
behavioral1
Sample
1015c5ad70a1830f439bade832e489af_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1015c5ad70a1830f439bade832e489af_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1015c5ad70a1830f439bade832e489af_JaffaCakes118
-
Size
368KB
-
MD5
1015c5ad70a1830f439bade832e489af
-
SHA1
a27fcebeb7c6b04a1b43a8e78f26c7626425dc28
-
SHA256
f27a7da583cd94961cd90977c0d969122ab75e4a993066da41d40bb4680f11a9
-
SHA512
7a76addd3f1ce11d6b1396511d300dd7271b429907d0e23ee47c4b95995a35b3d31b7965741e610663a7c48b8be7e3980f1c4ef20cf5420d1cca892e5e2068b8
-
SSDEEP
6144:GeRMehrVf/DRauRHlwrFYaN5ino7241GtMqzIXPH8CV+mybPzKP3zUeXm9+r:GeRMQrpDneFNzino7IUHybPzQjUeX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1015c5ad70a1830f439bade832e489af_JaffaCakes118
Files
-
1015c5ad70a1830f439bade832e489af_JaffaCakes118.exe windows:4 windows x86 arch:x86
09540b02ac16e20513ace16a237216bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
SetLastError
GetModuleHandleA
lstrlenW
EnumCalendarInfoA
GetCurrentThreadId
GetPrivateProfileStringA
FindAtomW
SetEvent
GetDriveTypeW
LocalFree
GetCurrentProcessId
ResumeThread
TlsGetValue
HeapCreate
CreateEventW
ReadFile
EnterCriticalSection
GetNumberFormatW
GetConsoleAliasA
user32
IsWindow
GetKeyState
SetFocus
GetClientRect
GetClassInfoA
DispatchMessageA
GetKeyboardType
DispatchMessageA
GetSysColor
GetMenuInfo
GetCursorInfo
DrawTextA
CallWindowProcW
tspkg
SpLsaModeInitialize
SpLsaModeInitialize
SpLsaModeInitialize
SpLsaModeInitialize
SpLsaModeInitialize
dsprop
CheckADsError
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 358KB - Virtual size: 357KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ