Static task
static1
Behavioral task
behavioral1
Sample
1050f2a8e42ef7601dd9ed8f6cba9e76_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1050f2a8e42ef7601dd9ed8f6cba9e76_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1050f2a8e42ef7601dd9ed8f6cba9e76_JaffaCakes118
-
Size
155KB
-
MD5
1050f2a8e42ef7601dd9ed8f6cba9e76
-
SHA1
11141cf08529f6891441ccd3f4951c319acabdcf
-
SHA256
153ed54132cff2bb8b24c792ff29a5cab464fa731185cc11d87a2527992f105b
-
SHA512
cc0c16cbb08ebde9589e3f58a0e535e009e7c858e8fe9a83c32021a601529054133ce67f4813a1c27d2df894af52448829f0885771a63fc56376839cb3f19fda
-
SSDEEP
3072:KgrtiWC/TBpCfD9FH4VHn+s6BK21g4XM91s4LeCSSLJLYu2hwSpwg6:Bt8/FkpaHOB71PXM84U0p4Hn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1050f2a8e42ef7601dd9ed8f6cba9e76_JaffaCakes118
Files
-
1050f2a8e42ef7601dd9ed8f6cba9e76_JaffaCakes118.exe windows:4 windows x86 arch:x86
d09b603a5740d47e2d51c4589d89e66f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetCommBreak
ExitThread
SetConsolePalette
GlobalUnlock
GetStdHandle
GlobalAddAtomA
GlobalLock
GlobalFree
RaiseException
GetProfileStringA
lstrcat
GetProcessHeap
GlobalFindAtomA
VirtualAlloc
CloseHandle
EnterCriticalSection
LoadResource
DeleteAtom
LocalSize
LoadLibraryExA
GetOEMCP
user32
GetForegroundWindow
GetActiveWindow
GetDC
AlignRects
GetWindowTextLengthA
CloseWindow
BeginPaint
ReleaseDC
ShowWindow
EndPaint
GetFocus
GetParent
GetWindowTextA
ValidateRect
GetWindow
DrawEdge
IsIconic
GetClassNameA
GetClassInfoExA
wsock32
WSASetBlockingHook
WSAAsyncGetServByPort
WSAGetLastError
WSAStartup
WSACleanup
linkinfo
CreateLinkInfoA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ