Static task
static1
Behavioral task
behavioral1
Sample
1a1a8b5c7df19824576630fa2750cf24_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1a1a8b5c7df19824576630fa2750cf24_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1a1a8b5c7df19824576630fa2750cf24_JaffaCakes118
-
Size
17KB
-
MD5
1a1a8b5c7df19824576630fa2750cf24
-
SHA1
cbeac6445504392259998e82f620629b9f3d5b2b
-
SHA256
58957be319766c5ac4fa459b1d6953f21759a726d7be0a754fb296b9bba29d60
-
SHA512
f97bb098d0d66ca7b634c8de79100cd65cf38853fed24d902f0ef6e1929be5f69f3263f8f86b1bc93511df9f4d098f3b7dfc6c655ea2c664ea8237d7f8bf538f
-
SSDEEP
384:4yg429bwLFzHaqa2FXjP3DqSoD+6zgZWhOr14QSoCeYIMRrvlS+Z33:4yg42bwH9TGq6zAkOrZCfxS+Z33
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a1a8b5c7df19824576630fa2750cf24_JaffaCakes118
Files
-
1a1a8b5c7df19824576630fa2750cf24_JaffaCakes118.exe windows:37722 windows x86 arch:x86
689f6ce7db76aca6a5a334113f9984bd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
VirtualAlloc
GetModuleFileNameA
CreateThread
GetCommandLineW
VirtualAlloc
ReadFile
lstrcpyW
ReadFile
WriteFile
ExitProcess
InterlockedIncrement
GetCurrentProcessId
WaitForSingleObject
InitializeCriticalSection
FreeLibrary
GetLastError
CloseHandle
GetCommandLineA
WaitForSingleObject
GetCurrentProcessId
FreeLibrary
GetModuleFileNameA
GetModuleHandleA
SetUnhandledExceptionFilter
LocalAlloc
EnterCriticalSection
user32
SetWindowPos
GetSysColor
GetSubMenu
SetWindowTextW
MapWindowPoints
LoadIconW
SetCapture
GetKeyState
SetTimer
DrawTextW
PostQuitMessage
ReleaseCapture
LoadImageW
SetTimer
TranslateMessage
LoadAcceleratorsW
GetMessageW
GetCursorPos
EnableMenuItem
SetWindowLongW
DestroyMenu
GetDC
GetMessageW
DestroyMenu
DialogBoxParamW
SetDlgItemTextW
LoadAcceleratorsW
MoveWindow
IsIconic
DestroyIcon
CharNextW
GetWindowLongW
CreateDialogParamW
EnableWindow
LoadAcceleratorsW
RegisterClassExW
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ