Static task
static1
Behavioral task
behavioral1
Sample
1bd407376804fb9e20c6d2fdcb37d5bc_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1bd407376804fb9e20c6d2fdcb37d5bc_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1bd407376804fb9e20c6d2fdcb37d5bc_JaffaCakes118
-
Size
157KB
-
MD5
1bd407376804fb9e20c6d2fdcb37d5bc
-
SHA1
0e0518ee8e5e59a9901b95e1944cfd26eb187c75
-
SHA256
c902b48747ee63289cffcdead0f68c8e79ea8083d39f23e19f34f67f0b609831
-
SHA512
6c2ec4cb8411f8ac9f256ffd0e04edd4bd61c5a4d604b4305f6ea6b11310f856a86703d8707325fcb72f3b09d941bc1d5ad4e7846659362df3243612c2229be0
-
SSDEEP
3072:KtOsVV8tiTFSIhYdQVjrFspjowc5MUYwP2KgPvjn4wzhFz6cIqE0F:QmAFSmeWuJs5MUn2HVFZIq9F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1bd407376804fb9e20c6d2fdcb37d5bc_JaffaCakes118
Files
-
1bd407376804fb9e20c6d2fdcb37d5bc_JaffaCakes118.exe windows:4 windows x86 arch:x86
e35439d1c7c160797c0ab72b7723a067
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
GetDC
SetTimer
CharNextW
PostThreadMessageW
SendMessageW
KillTimer
GetMessageW
wsprintfW
TranslateMessage
CharUpperW
DispatchMessageW
UnregisterClassA
kernel32
lstrcpyA
lstrcpyW
MultiByteToWideChar
WideCharToMultiByte
CheckRemoteDebuggerPresent
GlobalFree
GlobalAlloc
lstrcpyA
GetTickCount
LockResource
EnumResourceNamesA
DeleteCriticalSection
GetACP
FindClose
GetLastError
OutputDebugStringW
GetCPInfo
InitializeCriticalSection
lstrcmpiW
lstrlenW
GetModuleHandleW
oleacc
LresultFromObject
CreateStdAccessibleObject
ole32
StringFromGUID2
CoUninitialize
CoInitialize
CoRegisterClassObject
CoTaskMemFree
CoTaskMemRealloc
CoCreateInstance
CoTaskMemAlloc
CoRevokeClassObject
StringFromCLSID
shlwapi
PathCombineW
PathFileExistsW
Sections
.text Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.isete Size: 1024B - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ