Static task
static1
Behavioral task
behavioral1
Sample
226b3d27e0d38f6673c152e10519e4bc_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
226b3d27e0d38f6673c152e10519e4bc_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
226b3d27e0d38f6673c152e10519e4bc_JaffaCakes118
-
Size
418KB
-
MD5
226b3d27e0d38f6673c152e10519e4bc
-
SHA1
c5a00893a5a091d9b79599f4294902b55b7a2748
-
SHA256
1bd126f519246c00397ea807b4c78844ce015d7a964e8f3c76d29c8a60741205
-
SHA512
666e1c546a6bf9bc6fff569d0fdcd697f1f02e8d46d66383cec07bd17334e06dac00ada510c9c1a39191949156efcc2ba69f1ba5ccd7973a4b69512f39ca078f
-
SSDEEP
6144:qEZcvlap41Fd4pZiK+v/S3lB67Lz2lVDBsJdNl3kLHWiJo/Vtyf40TNbUmslLUJg:aCXSAYu5BsJd3AIk40TNbUP2UZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 226b3d27e0d38f6673c152e10519e4bc_JaffaCakes118
Files
-
226b3d27e0d38f6673c152e10519e4bc_JaffaCakes118.exe windows:4 windows x86 arch:x86
8c779ea8acb8e8db1ac1d8ba4f18f85f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CloseWindow
IsCharAlphaA
CreateAcceleratorTableA
kernel32
GetCompressedFileSizeA
GetCurrentThread
ReadFileScatter
DeleteCriticalSection
CancelWaitableTimer
SetCommTimeouts
LeaveCriticalSection
FillConsoleOutputAttribute
SetConsoleMode
GetDiskFreeSpaceA
GenerateConsoleCtrlEvent
GlobalAddAtomA
GetACP
CreateNamedPipeA
GlobalFindAtomA
GetSystemInfo
ScrollConsoleScreenBufferW
WriteTapemark
IsBadReadPtr
SetFileTime
FileTimeToLocalFileTime
WritePrivateProfileSectionA
GetWindowsDirectoryW
ClearCommBreak
GetTempFileNameW
LoadLibraryA
SetPriorityClass
GlobalGetAtomNameA
QueueUserAPC
WritePrivateProfileStringA
MoveFileW
GlobalFindAtomW
CreatePipe
GetStringTypeW
IsDebuggerPresent
ReadConsoleA
GetPrivateProfileSectionW
SetupComm
GetEnvironmentStringsW
SetEndOfFile
VirtualFree
Sections
.text Size: 36KB - Virtual size: 345KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 369KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ