Static task
static1
Behavioral task
behavioral1
Sample
1544c379af486bb1c47a312ce4ddd292_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1544c379af486bb1c47a312ce4ddd292_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1544c379af486bb1c47a312ce4ddd292_JaffaCakes118
-
Size
150KB
-
MD5
1544c379af486bb1c47a312ce4ddd292
-
SHA1
52264acfb418d380888b6bb0d6b4429569089870
-
SHA256
465e9dd3ab6b1908ae5153d88f8cc380ac5b16ffacf31c46da6e4458e10f1d5d
-
SHA512
74241739cceb5c8650aa8543cc61f90df35f6121ece015456f0f28e3693b13e771e5e037dd807c2d1786861777a9326a2553c88ce0ca488c3712e5ce455dc0cc
-
SSDEEP
3072:dzchuggyhdjXpjOaT6lkt8iXxiMYrq9VYxcTqRv6qgp0HpSbm0crBIJ:5K4yfj5aaT6A9Xxi/0Vcmq8pcpSCg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1544c379af486bb1c47a312ce4ddd292_JaffaCakes118
Files
-
1544c379af486bb1c47a312ce4ddd292_JaffaCakes118.exe windows:4 windows x86 arch:x86
030b7e91f9682ee9ea88eb221261deb0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalSize
lstrcpyn
GetOEMCP
GlobalAddAtomA
DeleteAtom
CloseHandle
GetLocalTime
EnterCriticalSection
GetStdHandle
LoadLibraryExA
GlobalFree
SetConsolePalette
GlobalLock
ExitThread
RaiseException
SetCommBreak
GetProcessHeap
LoadResource
GlobalFindAtomA
VirtualAlloc
GetProfileStringA
user32
GetClassNameA
IsIconic
GetClassInfoExA
DrawEdge
GetForegroundWindow
ShowWindow
GetDC
GetParent
BeginPaint
CloseWindow
GetWindowTextLengthA
EndPaint
GetWindow
GetWindowTextA
ValidateRect
GetActiveWindow
ReleaseDC
GetFocus
AlignRects
wsock32
WSAAsyncGetServByPort
WSAGetLastError
WSAStartup
WSACleanup
WSASetBlockingHook
linkinfo
CreateLinkInfoA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ