Static task
static1
Behavioral task
behavioral1
Sample
16ea7aa887731711eaa9b1a5ea16cbcd_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
16ea7aa887731711eaa9b1a5ea16cbcd_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
16ea7aa887731711eaa9b1a5ea16cbcd_JaffaCakes118
-
Size
169KB
-
MD5
16ea7aa887731711eaa9b1a5ea16cbcd
-
SHA1
5cd80bde8b1ebb7799a2391d69ac7b77fa986e51
-
SHA256
1a3c06fc73d6797ef88e7a71b9541515564a7ee9e041b6b949e838eab5e160aa
-
SHA512
2bea59055a67b20784f3d80fc419563704d445b9693482c335b0660cdbde6326e23e55a5f050af3153bb41dae49111af13ff52024168f275e9ba29fc00a9b4fe
-
SSDEEP
3072:jDhGp7Uo0+yDugLH//07iDKHIHmRNABHYGqGIw2soU+GRNx2N2ydV51rS4y:wBczDud7SKHIGfABRqpp3U+as2ID
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16ea7aa887731711eaa9b1a5ea16cbcd_JaffaCakes118
Files
-
16ea7aa887731711eaa9b1a5ea16cbcd_JaffaCakes118.exe windows:4 windows x86 arch:x86
77dc2ff54aaec717e06cd7059c56e700
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
HeapCreate
GetLastError
DeleteAtom
EnterCriticalSection
IsBadCodePtr
GetStdHandle
GlobalFree
GlobalAddAtomA
SetCommBreak
SetConsolePalette
WriteProfileStringA
RaiseException
VirtualAlloc
LoadResource
GlobalUnlock
lstrcat
LoadLibraryExA
GlobalAddAtomA
LocalFree
GetOEMCP
user32
IsIconic
GetActiveWindow
GetParent
BeginPaint
AlignRects
ValidateRect
ShowWindow
DrawEdge
EndPaint
GetClassInfoExA
ReleaseDC
GetClassNameA
GetWindowTextA
GetWindow
GetWindowTextLengthA
GetDC
GetForegroundWindow
CloseWindow
GetFocus
wsock32
WSAGetLastError
WSASetBlockingHook
WSAStartup
WSAAsyncGetServByPort
WSACleanup
linkinfo
CreateLinkInfoA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ