Static task
static1
Behavioral task
behavioral1
Sample
256becbc35f35c4e56bee34559da210d_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
256becbc35f35c4e56bee34559da210d_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
256becbc35f35c4e56bee34559da210d_JaffaCakes118
-
Size
20KB
-
MD5
256becbc35f35c4e56bee34559da210d
-
SHA1
a8cc4b4c72713a1266cbcaca17de9eb8553e8f77
-
SHA256
e9646a8373759347de998227f972ec54d3e125c1f0c5fdb06d7d161e5ccd291f
-
SHA512
32bb2330c99b5f1ba0ec089562c11fd775398f8a31c4480638e5513a8fea9a2a0d6b8164fcc210e75e03c1a319d569168de3760cd41bec4949cf899f4bd3698d
-
SSDEEP
96:q7kkg2jqFlN7qIlq7ujpLjCfbGBqUxrCjdg0mlbo6hjcC/UMnUMum012nm1D4OAp:ukkg2yzlGuNL+flJg0mySj3TUMz0k6D2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 256becbc35f35c4e56bee34559da210d_JaffaCakes118
Files
-
256becbc35f35c4e56bee34559da210d_JaffaCakes118.exe windows:5 windows x86 arch:x86
d304ef8e9e8393c0028c6e2332cf21b3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
PostMessageA
DialogBoxParamA
SetScrollInfo
MessageBoxA
SetWindowTextA
EndDialog
GetDlgItem
ScrollWindow
DestroyCursor
CharLowerA
ShowCursor
SendMessageA
DestroyMenu
kernel32
GetProcessHeap
CloseHandle
GetStartupInfoA
CreateDirectoryA
GetVersionExA
ExitProcess
comctl32
InitCommonControlsEx
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ