Static task
static1
Behavioral task
behavioral1
Sample
260785dd1c1928f95698fcd2e719b352_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
260785dd1c1928f95698fcd2e719b352_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
260785dd1c1928f95698fcd2e719b352_JaffaCakes118
-
Size
293KB
-
MD5
260785dd1c1928f95698fcd2e719b352
-
SHA1
f27ba913e4db50f8e73feb93448b1c0efcf8d7ec
-
SHA256
64454ef899ee54fd1a70ba3627ee58210a3d8d49fbe6fb67e0d25d2eae0c52da
-
SHA512
13cee5d6edf912c1bfe733ae65ad9ac15d8f2a98228b34e4333f869887022488d95c3787691138188830920309b8ac4ba3cb80fcfdc129d6fc97fc80f8621d27
-
SSDEEP
6144:reI5ciOYXB6YpJtF4hB4q9IgRwyY6QYZT94vdXUTvOAGgtFsoA:reyc0XB6gyhF9IgzHE6v1Gcqo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 260785dd1c1928f95698fcd2e719b352_JaffaCakes118
Files
-
260785dd1c1928f95698fcd2e719b352_JaffaCakes118.exe windows:4 windows x86 arch:x86
ece0ed96eb554a459eaa9b7d2763ab20
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateEventA
CreateThread
EnterCriticalSection
ExitThread
GetCommandLineA
GetCurrentProcessId
GetDateFormatA
GetSystemDirectoryA
GetThreadLocale
GetTickCount
GetVersionExA
GlobalAlloc
GlobalUnlock
InitializeCriticalSection
IsBadCodePtr
LeaveCriticalSection
LoadLibraryA
LocalAlloc
MoveFileW
SetEvent
SetFilePointer
Sleep
TerminateThread
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteFile
lstrlenA
user32
CharUpperBuffW
EnableMenuItem
EndPaint
EnumDisplaySettingsA
GetMenuItemCount
GetMessagePos
KillTimer
LoadAcceleratorsW
LoadMenuW
PostQuitMessage
SendMessageW
SetTimer
SetWindowPos
SetWindowRgn
SetWindowTextW
SystemParametersInfoW
TranslateAcceleratorW
TranslateMessage
WindowFromPoint
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 278KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ