Static task
static1
Behavioral task
behavioral1
Sample
236c12f5a2648a23208eb8a8d66956b4_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
236c12f5a2648a23208eb8a8d66956b4_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
236c12f5a2648a23208eb8a8d66956b4_JaffaCakes118
-
Size
38KB
-
MD5
236c12f5a2648a23208eb8a8d66956b4
-
SHA1
2203c6ae20cf2ecf94ddfb516b85c5e5adcee88e
-
SHA256
e02a400a460321cc6765b6febf76f29777d382ec52010b3f225b63e03e014f09
-
SHA512
63787a986cf74a768c9a7dda5693f29f03a59759c52c4b675835706ba8b626f02e99837017c6d509d3e6318483e063a8b72705c0fcb22d50437293e7caa7357a
-
SSDEEP
768:5acJLK62HbvYz7T9bzXP9iLiuZipZUhA7BnDrC0FR/:5F9V0UT9zXP9qieQihA7B3/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 236c12f5a2648a23208eb8a8d66956b4_JaffaCakes118
Files
-
236c12f5a2648a23208eb8a8d66956b4_JaffaCakes118.exe windows:4 windows x86 arch:x86
8e6041db739cfcae5139490a41e35549
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetCurrentThreadId
GetTickCount
FreeLibrary
GetTickCount
LeaveCriticalSection
CloseHandle
GetModuleFileNameW
LocalAlloc
HeapFree
GetSystemTimeAsFileTime
GetProcessHeap
GetTickCount
InterlockedCompareExchange
LocalAlloc
DisableThreadLibraryCalls
CloseHandle
GetCurrentThreadId
MultiByteToWideChar
CreateThread
GetVersionExA
CreateThread
ReadFile
GetCurrentProcessId
CloseHandle
HeapAlloc
LocalAlloc
GetCurrentProcessId
CloseHandle
CreateFileW
GetCurrentThreadId
GetCurrentThreadId
UnhandledExceptionFilter
HeapAlloc
GetModuleHandleA
LocalFree
user32
SetTimer
ReleaseDC
GetSysColor
DispatchMessageW
ShowWindow
PostQuitMessage
SendDlgItemMessageW
SetTimer
SetWindowLongW
SetCursor
GetSysColor
wsprintfA
ShowWindow
EnableWindow
wsprintfA
LoadIconW
SetWindowPos
GetWindowRect
EndDialog
SendDlgItemMessageW
PostQuitMessage
SetWindowTextW
ShowWindow
KillTimer
SetCursor
DefWindowProcW
SetTimer
IsDlgButtonChecked
SetCursor
PeekMessageW
ShowWindow
ShowWindow
PostQuitMessage
GetParent
IsDlgButtonChecked
EndDialog
ShowWindow
wsprintfA
SetWindowPos
DispatchMessageW
Sections
.text Size: 31KB - Virtual size: 52KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ