Static task
static1
Behavioral task
behavioral1
Sample
19ac8f1ac89029967a412d83e5c1fe69_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
19ac8f1ac89029967a412d83e5c1fe69_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
19ac8f1ac89029967a412d83e5c1fe69_JaffaCakes118
-
Size
318KB
-
MD5
19ac8f1ac89029967a412d83e5c1fe69
-
SHA1
c6bfe6f29f84e4e611de3e8f6cf86feb14d8a1a1
-
SHA256
3c5cb80b6169e0632078ec90cd4ecb35a9eaccd3d8876417f21210cd61b8c176
-
SHA512
15587ef38dfc1761e71e3d504b0c90fab4f091cbf1cf943a3920507b153d2bd68a5584dca1013d5914204353846e45646d87ec7b83ca01c2c01d689bacbdae1e
-
SSDEEP
6144:27K3lBM/e0AAVB3Y6hhliaQh19qTdI7ub70AoMGLMsHypVFTcgC3Qp9jp4crcAKG:27KAm07VK6hdQhbqTdISbUMGLMsHuV2i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19ac8f1ac89029967a412d83e5c1fe69_JaffaCakes118
Files
-
19ac8f1ac89029967a412d83e5c1fe69_JaffaCakes118.exe windows:4 windows x86 arch:x86
da74e962c178c1d4b45b692bb4a78e76
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForMultipleObjects
GetProcAddress
GetProcessHeap
VirtualAlloc
GetModuleHandleA
GlobalLock
CreateEventA
GetLastError
VirtualFree
VirtualProtect
LocalFree
HeapReAlloc
ExitProcess
HeapCreate
GetFileAttributesA
OpenMutexA
HeapSize
CreateThread
HeapFree
HeapAlloc
RtlUnwind
Sleep
GlobalAlloc
LoadLibraryA
GetCurrentProcess
TerminateProcess
GetModuleFileNameA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
user32
GetTopWindow
UpdateWindow
SendMessageA
gdi32
SelectObject
ole32
CoInitialize
CoCreateInstance
psapi
EmptyWorkingSet
msvfw32
DrawDibClose
ICRemove
gdiplus
GdiplusStartup
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 284KB - Virtual size: 283KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 353KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ