Static task
static1
Behavioral task
behavioral1
Sample
252b4b53f74523fc066801ad62c91b29_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
252b4b53f74523fc066801ad62c91b29_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
252b4b53f74523fc066801ad62c91b29_JaffaCakes118
-
Size
24KB
-
MD5
252b4b53f74523fc066801ad62c91b29
-
SHA1
b8953d4b3558c3ba4ff0dd218d4b39da9b97f3ef
-
SHA256
1b35d74446417d5235002cbc0d800738225a50fdf6b8293881b6ad6bd744c0e8
-
SHA512
c211937725e6b523b02bb8eb093335edb132bf0bf0edbec89774c5910c81c64c7acd992197c06322b277616b4b213620ea1817e2c42bef42a9a9bcbc744642ef
-
SSDEEP
384:iinvIDPWlxWCW1at58qr563Uqvv15oRQbLtxciMdaa6P2jYh6x+uTqVD:jn+KC1atr69r3LYid7j8JqVD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 252b4b53f74523fc066801ad62c91b29_JaffaCakes118
Files
-
252b4b53f74523fc066801ad62c91b29_JaffaCakes118.exe windows:4 windows x86 arch:x86
89c4e14a88a5d2f6f6499fde6e32abb3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CallMsgFilterA
kernel32
HeapReAlloc
GetProcAddress
QueryPerformanceCounter
InitializeCriticalSection
SetUnhandledExceptionFilter
lstrlenA
GetDateFormatA
GetLastError
GetTickCount
WinExec
InterlockedCompareExchange
DeleteCriticalSection
GetCurrentThreadId
LeaveCriticalSection
GetSystemTimeAsFileTime
UnhandledExceptionFilter
GetCommandLineA
VirtualAlloc
EnterCriticalSection
Sleep
lstrlenW
HeapAlloc
lstrcmpiA
HeapFree
FileTimeToSystemTime
CompareFileTime
TerminateProcess
GetCurrentProcess
crypt32
CryptEnumOIDInfo
gdi32
GetTextMetricsW
GetTextMetricsA
GetTextExtentPointW
GetTextExtentPointA
SelectObject
DeleteObject
samlib
SamRemoveMultipleMembersFromAlias
ntdll
RtlUnwind
Sections
.text Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE