Static task
static1
Behavioral task
behavioral1
Sample
2147e94373acb0f2b5430fd60b515807_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2147e94373acb0f2b5430fd60b515807_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
2147e94373acb0f2b5430fd60b515807_JaffaCakes118
-
Size
64KB
-
MD5
2147e94373acb0f2b5430fd60b515807
-
SHA1
71ff333d1f75748a1bc0da22b660e76f7a55655f
-
SHA256
558f00fb536a2dd67693d71f1ab6da1540173feb62af2c861630ba90c872a512
-
SHA512
8578e890caffa3e9d797e205a1feb4d0d700aa94a058d961464b0fb5cbe6450376bd0b2a61341057ceaa9dc912dd7e3ed82bc32b194858974cb132807f1693c5
-
SSDEEP
1536:2NHms3qFZijf8wqh2/un4DfrkA0d0hzB02qIV0VO:2AhCjwh2Ki5U0FzUA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2147e94373acb0f2b5430fd60b515807_JaffaCakes118
Files
-
2147e94373acb0f2b5430fd60b515807_JaffaCakes118.exe windows:4 windows x86 arch:x86
d431595a1a0daa9baa60604eb21fb2af
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalUnlock
FindClose
SetEvent
GetFileAttributesW
DeleteFileW
GetLocalTime
WritePrivateProfileStringW
CreateThread
GetProcAddress
InterlockedDecrement
SetWaitableTimer
SetThreadPriority
GlobalFree
SetEndOfFile
GetLogicalDrives
FileTimeToSystemTime
GetDriveTypeW
GlobalAddAtomW
GetVersion
CreateEventW
GetModuleHandleW
ResetEvent
GetLastError
FindResourceExW
WaitForMultipleObjects
QueryDosDeviceW
FindFirstChangeNotificationW
GetFileAttributesExW
LockResource
SizeofResource
GlobalDeleteAtom
lstrlenW
LoadLibraryA
GetFileSize
GetModuleFileNameW
user32
SetCursor
EnableWindow
SetWindowPos
DestroyMenu
DrawTextW
CreatePopupMenu
ReleaseDC
GetWindowRect
SendDlgItemMessageW
LoadBitmapW
GetClassNameW
WindowFromPoint
PostQuitMessage
AppendMenuW
LoadCursorW
DispatchMessageW
SystemParametersInfoW
RegisterClassExW
GetWindowTextW
TrackPopupMenu
gdi32
SetMapMode
CreateBitmap
SetTextColor
CreateRoundRectRgn
GetObjectW
MoveToEx
SetBkColor
GetDeviceCaps
advapi32
RegQueryValueExW
LookupAccountSidW
RegNotifyChangeKeyValue
RegSetValueExW
RegCloseKey
Sections
.text Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE