Static task
static1
Behavioral task
behavioral1
Sample
17eb49823bf493329dc1a9ed20e1271b_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
17eb49823bf493329dc1a9ed20e1271b_JaffaCakes118
-
Size
9KB
-
MD5
17eb49823bf493329dc1a9ed20e1271b
-
SHA1
71cf5e5620c2f9edf1115077e72feb7c27cd6fdc
-
SHA256
7bfadebb3af94457ab4dcebec821b8911498097a1ff7fb40102ad84f6b547553
-
SHA512
b44b459a17775a5fdcdd983911843e7e5eaf10137e20f79e24ed8831b8f49e1e74016f6e761eb2a38fadf5d3d9e60c2f1448de11fee783315c4e6e463e980a5f
-
SSDEEP
192:7SU4fKxFFOu9+KERLeiFqgXn8REd1HPKs2yI8eAGUsSvg:GU11O++K+l4QL1to8D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17eb49823bf493329dc1a9ed20e1271b_JaffaCakes118
Files
-
17eb49823bf493329dc1a9ed20e1271b_JaffaCakes118.exe windows:4 windows x86 arch:x86
eab3327cb722701cb76b0524ee648f08
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Beep
CancelWaitableTimer
CreateMailslotA
CreateSemaphoreW
DisableThreadLibraryCalls
ExitProcess
GetAtomNameW
GetCommProperties
GetDateFormatA
GetNumberOfConsoleMouseButtons
GlobalFree
HeapUnlock
IsDBCSLeadByteEx
LocalHandle
LocalSize
RemoveDirectoryA
SetConsoleCP
SetProcessPriorityBoost
UnlockFileEx
WaitNamedPipeA
user32
ChangeMenuA
CopyAcceleratorTableW
DdeEnableCallback
DdeQueryStringA
DrawIcon
DrawTextW
EndPaint
GetDoubleClickTime
GetMonitorInfoW
GetSysColorBrush
GetThreadDesktop
GetWindowRgn
LoadAcceleratorsA
MsgWaitForMultipleObjects
OemToCharW
PackDDElParam
RegisterSystemThread
SendMessageA
SendMessageCallbackA
SendMessageW
SetSysColorsTemp
SetWinEventHook
SetWindowsHookA
UnloadKeyboardLayout
gdi32
CopyEnhMetaFileA
CreateEllipticRgnIndirect
CreateScalableFontResourceW
FillRgn
GdiGetBatchLimit
GetCharABCWidthsFloatW
GetCharWidthFloatW
GetEnhMetaFileDescriptionW
GetGlyphOutlineW
GetICMProfileW
GetMetaFileBitsEx
GetPixelFormat
GetRegionData
GetTextExtentExPointA
OffsetClipRgn
PlayEnhMetaFileRecord
Polygon
SetMapMode
SetPixelV
WidenPath
Sections
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE