Static task
static1
Behavioral task
behavioral1
Sample
1b7466c61bdc784c4bde81cfc2efeaf8_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1b7466c61bdc784c4bde81cfc2efeaf8_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1b7466c61bdc784c4bde81cfc2efeaf8_JaffaCakes118
-
Size
191KB
-
MD5
1b7466c61bdc784c4bde81cfc2efeaf8
-
SHA1
dd75100d762bf33c504350e79a25652641e5fa93
-
SHA256
b7423ce2f5d7f9803e9f0280488d72c60af88057992891b4e2c8142b55cd3238
-
SHA512
6f82f1f53df53033afdc7b0222381208a2f97fa97301498ae673bba9c03baca59f6d61ec10625922f866233de909e1c4b15f2da6f0562d48be1da09f0b610b45
-
SSDEEP
3072:3hQZU53xaIFzAXjhbuPP/m57F3XU7Iwmm0J8Tso8jAyB99Grfzy:3hIIgzU/U5WPmm0OP1yT9GP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b7466c61bdc784c4bde81cfc2efeaf8_JaffaCakes118
Files
-
1b7466c61bdc784c4bde81cfc2efeaf8_JaffaCakes118.exe windows:4 windows x86 arch:x86
5614bfee4f841aefc0428c9b658028a1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
oleacc
LresultFromObject
user32
MessageBoxW
RegisterClassExW
GetWindowInfo
GetUpdateRgn
LoadCursorW
GetDC
CreateWindowExW
EndDialog
kernel32
ProcessIdToSessionId
MoveFileW
CreateMutexA
PrivMoveFileIdentityW
LoadLibraryW
CreateFileW
GetFileAttributesW
CreateDirectoryW
AddAtomW
GetProcessId
GetStdHandle
CreateFileMappingA
OpenProcess
CloseHandle
WaitForSingleObject
GetProcAddress
WriteFile
GetModuleFileNameW
OutputDebugStringW
EnumResourceTypesA
LoadLibraryExW
MapViewOfFile
GetSystemTime
VirtualFree
ExitProcess
GetFileAttributesA
lstrcpynW
ReleaseMutex
DuplicateHandle
GetUserDefaultUILanguage
UnmapViewOfFile
VirtualAlloc
SetEvent
SystemTimeToFileTime
DeleteAtom
LoadLibraryA
CreateEventA
FindAtomW
Sections
.text Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1024B - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ