Static task
static1
Behavioral task
behavioral1
Sample
20e1a0d46c8a84eefedc87e0031ed676_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
20e1a0d46c8a84eefedc87e0031ed676_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
20e1a0d46c8a84eefedc87e0031ed676_JaffaCakes118
-
Size
393KB
-
MD5
20e1a0d46c8a84eefedc87e0031ed676
-
SHA1
5b95f309c9cc6e999bb18d96466d01a7785ef971
-
SHA256
64d80d2f816b61d266911c86dd7589224b2ad553b1195432a48f588a889fba1e
-
SHA512
f98979bfb78a7e48a93b884c29b193b5bee918f5c86d00f619cd2c47339d52607615b831a15d63ee281ae5755d8b756800285d9bdfcf866e73b33bd4830bda37
-
SSDEEP
6144:yxtq6S1dGppg6gUmXepiZujTthY8fMccz907DP3dMKsucbTb9Vhpfn2BLuPbNNie:JdGppg0zj7Y8Sz96jdbsucLJUSBwe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20e1a0d46c8a84eefedc87e0031ed676_JaffaCakes118
Files
-
20e1a0d46c8a84eefedc87e0031ed676_JaffaCakes118.exe windows:4 windows x86 arch:x86
dc10ad566427e4b77e0cccdd9e90b836
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileMappingA
CloseHandle
GetModuleHandleA
TlsGetValue
IsDebuggerPresent
GetConsoleCP
GetStdHandle
LocalUnlock
FindClose
IsBadReadPtr
LocalFree
LoadLibraryExA
CreateEventA
HeapCreate
FreeEnvironmentStringsA
GlobalLock
GetLastError
CreateFileA
GetFullPathNameA
GetACP
user32
PostMessageA
GetDlgItem
IsWindow
GetMessageA
DispatchMessageA
EmptyClipboard
DefWindowProcA
ScrollWindow
SetFocus
GetDC
EndDialog
CreateDialogParamA
GetIconInfo
DrawIconEx
msasn1
ASN1BERDecEoid
ASN1BERDecBool
ASN1BERDecCheck
ASN1BEREncLength
ASN1BEREncFlush
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ