Static task
static1
Behavioral task
behavioral1
Sample
1526ac443fe160874fd5633ce50908dd_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
1526ac443fe160874fd5633ce50908dd_JaffaCakes118
-
Size
9KB
-
MD5
1526ac443fe160874fd5633ce50908dd
-
SHA1
31297f5473066214e01b4757e8d4922d19a35782
-
SHA256
48e19480cd8e35f5bdeac3aed5f98f3622ee024d8ad4291dee106eef0c3a71d4
-
SHA512
b147b4bef145fb103b48af91d079702eeda48865c7c2afb4aead3b724249d4ee4efd260f811255934abc1ad6c17e58580cffbb3cdcc07bffa902fe033f30647d
-
SSDEEP
192:K0qdw7NROPW6+tNbwF/M3XRUohIzXbjLcqnNIgAkzKOHjHd7m6wGL:D3NEPW6kXULfTnNtj77
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1526ac443fe160874fd5633ce50908dd_JaffaCakes118
Files
-
1526ac443fe160874fd5633ce50908dd_JaffaCakes118.exe windows:4 windows x86 arch:x86
799b38409b1f8aae401d0807da18e6ea
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CommConfigDialogA
CreateWaitableTimerA
EnterCriticalSection
EscapeCommFunction
ExitProcess
GetAtomNameA
GetDefaultCommConfigA
GetLogicalDriveStringsW
GetStringTypeA
GetSystemDirectoryW
GlobalDeleteAtom
GlobalFindAtomW
GlobalFree
LocalAlloc
MultiByteToWideChar
OpenWaitableTimerW
SetCommTimeouts
SetNamedPipeHandleState
SetWaitableTimer
UTRegister
WriteProfileSectionA
user32
CallWindowProcA
ChangeMenuW
DdeDisconnect
DestroyCursor
DrawAnimatedRects
EndTask
EnumDisplayDevicesA
GetCaretPos
GetMenuStringW
GetWindowLongA
IsCharAlphaNumericA
IsWindowUnicode
LoadBitmapA
LoadStringA
RegisterClassW
RegisterTasklist
SetCapture
SetClassLongA
SetClipboardViewer
SetCursorPos
WinHelpW
gdi32
AbortDoc
AbortPath
AddFontResourceA
CancelDC
CreateFontA
CreateICW
ExtCreatePen
ExtFloodFill
GetArcDirection
GetBkMode
GetBrushOrgEx
GetCharWidth32W
GetFontData
GetTextCharacterExtra
GetTextMetricsA
LineDDA
MaskBlt
PolyBezierTo
SetBoundsRect
SetWinMetaFileBits
Sections
.text Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ