Static task
static1
Behavioral task
behavioral1
Sample
267a3acf2b7ec01e22ba838b456ca380_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
267a3acf2b7ec01e22ba838b456ca380_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
267a3acf2b7ec01e22ba838b456ca380_JaffaCakes118
-
Size
41KB
-
MD5
267a3acf2b7ec01e22ba838b456ca380
-
SHA1
dac1bcbb1e660d452e515e3f26f6e25abaf5c7c7
-
SHA256
da704b72017d2b3a922e951c6feab6fd12e99d48c1523e94104e3d7816933079
-
SHA512
e447823aec49d72fec0cb0590ce29a7bce0ee151e0e603265835c9395b967b34263be0af272865fdb9ee81d874053faae2e55db46d73d824018342b5eb759564
-
SSDEEP
768:KJeAj0xUpc8wVoPn/oZqyWeVC2Eb9sPK9TRFhbAitnps2YQe98rX:od02pc87n/oZqyW0+bnZqiVYQXX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 267a3acf2b7ec01e22ba838b456ca380_JaffaCakes118
Files
-
267a3acf2b7ec01e22ba838b456ca380_JaffaCakes118.exe windows:4 windows x86 arch:x86
ad27f1b84136754b8bda3cf919df647b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTimeFormatA
ExitProcess
LoadLibraryA
GetProcAddress
CreateThread
Sleep
GetModuleHandleA
GetStartupInfoA
user32
DestroyWindow
GetSystemMetrics
RegisterClassA
LoadCursorA
PostQuitMessage
GetWindowRect
SetDlgItemTextA
CreateWindowExA
LoadIconA
MessageBoxA
LoadImageA
ReleaseDC
GetDCEx
WaitMessage
DispatchMessageA
TranslateMessage
PeekMessageA
ShowWindow
DefWindowProcA
UpdateWindow
SetFocus
gdi32
CreateCompatibleBitmap
CreateRectRgnIndirect
DeleteObject
GetStockObject
GetObjectA
msvcp60
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
msvcrt
rand
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
atoi
memmove
malloc
getenv
??2@YAPAXI@Z
memset
memcpy
_except_handler3
sprintf
strlen
_controlfp
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE