Static task
static1
Behavioral task
behavioral1
Sample
22f0fc711c02ed62a4dd6d6d91a81cfd_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
22f0fc711c02ed62a4dd6d6d91a81cfd_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
22f0fc711c02ed62a4dd6d6d91a81cfd_JaffaCakes118
-
Size
328KB
-
MD5
22f0fc711c02ed62a4dd6d6d91a81cfd
-
SHA1
7f843d8d292f2bf890b8276681be72003ed095ef
-
SHA256
cf92fc7ef83cee86af7f64ac0a51769db5461837d01ab7c44dc363d56721149a
-
SHA512
984872df563f0440350e4e6ac3ef6a47121858ef765983155aea52e924e56c0ef373b9cc57baea8c310eb0e910f42e7eaee9a45a80d566ed0e8ef99dc5f67af8
-
SSDEEP
6144:axVpBMDHXxy+CdFr/GJS0hGaMUXjyIU4Ozwp05M8:07OD3wDjTGJZcatjQXzksM8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22f0fc711c02ed62a4dd6d6d91a81cfd_JaffaCakes118
Files
-
22f0fc711c02ed62a4dd6d6d91a81cfd_JaffaCakes118.exe windows:4 windows x86 arch:x86
61381354ae25f390cdccc4b68911bbad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetModuleHandleA
SuspendThread
HeapReAlloc
WaitForMultipleObjects
GetSystemDefaultLangID
GetStdHandle
InterlockedExchange
GetCommandLineA
SearchPathA
VirtualProtect
HeapCreate
GetVersion
CompareFileTime
WaitForSingleObject
GetTickCount
lstrlenA
GlobalUnlock
GetAtomNameA
SetConsoleCP
GetConsoleCP
user32
GetKeyboardLayout
SetScrollInfo
CreateIcon
DestroyMenu
GetKeyState
DispatchMessageA
DispatchMessageA
EnableScrollBar
IsDialogMessage
DragObject
InvertRect
GetDlgItem
InsertMenuA
SetPropA
DrawCaption
GetCursorInfo
SetWindowPos
CreateMenu
MessageBoxA
FindWindowA
CopyImage
CreateCursor
DialogBoxParamA
advapi32
RegCloseKey
RegCreateKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyA
uxtheme
GetThemeColor
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ