Static task
static1
Behavioral task
behavioral1
Sample
258a121c679ef416a84744e03376d842_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
258a121c679ef416a84744e03376d842_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
258a121c679ef416a84744e03376d842_JaffaCakes118
-
Size
275KB
-
MD5
258a121c679ef416a84744e03376d842
-
SHA1
674be95e4b1da675275c3dc796c4324a6fa09699
-
SHA256
7fa55b78e7ae97fe17d007bf022215d9d0dd5a46c2e127becd7c5156ac27b501
-
SHA512
ef990e67233488be7465d9c937aef6b5222eae089cb35ed60e4042ee2bef5772ab7f175d7e095cae1af75d8570e7174772120331a0977f1f63539c2ea58033dc
-
SSDEEP
6144:em296mMHGLd1u5GFgYEezjbM6Q9m+7sln2fBDd:emk+GLdoN2jg9OlnA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 258a121c679ef416a84744e03376d842_JaffaCakes118
Files
-
258a121c679ef416a84744e03376d842_JaffaCakes118.exe windows:4 windows x86 arch:x86
5eaf156a2a23eac3157ca962aec0b702
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CompareStringA
CreateEventA
CreateThread
EnterCriticalSection
ExitThread
GetComputerNameA
GetLocalTime
GetModuleFileNameA
GetProcessHeap
GetTickCount
GlobalAlloc
GlobalLock
InitializeCriticalSection
InterlockedExchange
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalLock
MapViewOfFile
MulDiv
RaiseException
SetEvent
SetFilePointer
Sleep
TerminateThread
WaitForSingleObject
WriteConsoleA
WriteFile
lstrlenA
user32
BeginPaint
CreatePopupMenu
DefWindowProcW
DestroyMenu
DrawFocusRect
GetDC
GetMenuItemInfoW
GetMessagePos
GetSubMenu
GetSystemMenu
GetWindowLongW
LoadBitmapW
LoadStringW
OffsetRect
PeekMessageW
ScreenToClient
TrackPopupMenuEx
UnregisterClassW
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 259KB - Virtual size: 262KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ