Static task
static1
Behavioral task
behavioral1
Sample
258900b115054c8c4decd1833aef8432_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
258900b115054c8c4decd1833aef8432_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
258900b115054c8c4decd1833aef8432_JaffaCakes118
-
Size
331KB
-
MD5
258900b115054c8c4decd1833aef8432
-
SHA1
c6d0a5443a49e7a9d96c1f914fa02a3f03e13cf6
-
SHA256
9fcba29f3286203fe9426ee1e71f749ef2e13c88b4d43578fb32808df9773f8a
-
SHA512
06f47cfc997b6d0d78a60a16b64c6b6171a35d5c277b024a1de0bfe4c1dabddb797bedf84425dfadca1a72f58abd218e9ecb2a426f99894373ee1aa55f93ff2f
-
SSDEEP
6144:XIOchSRq/GST/mVnBd1LtmCJUI2AFpdwWWU1h4R3PSWNODtK6x/7Ne8o42ETEZB:EEuG+/mxBdNtmCJUI2ATdwWWtfBNODtU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 258900b115054c8c4decd1833aef8432_JaffaCakes118
Files
-
258900b115054c8c4decd1833aef8432_JaffaCakes118.exe windows:5 windows x86 arch:x86
2754b8461b26b1d915f96eb39a4216dd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsWindowEnabled
IsIconic
GetUpdateRect
GetClipboardOwner
GetDesktopWindow
GetClientRect
BeginPaint
IsDlgButtonChecked
EnableWindow
SetWindowTextA
EndPaint
DialogBoxParamA
EnableScrollBar
LoadIconA
gdi32
RectVisible
ExcludeClipRect
GetTextColor
IntersectClipRect
kernel32
SetEndOfFile
GetTickCount
GetEnvironmentStrings
SetFileAttributesA
HeapDestroy
WideCharToMultiByte
InitializeCriticalSection
EnterCriticalSection
LoadLibraryA
GetProcAddress
GetThreadLocale
HeapFree
ExitProcess
GetModuleHandleA
FreeLibrary
HeapAlloc
HeapCreate
GetStartupInfoA
DeleteCriticalSection
LeaveCriticalSection
Sections
.text Size: 318KB - Virtual size: 318KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 232B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ