Static task
static1
Behavioral task
behavioral1
Sample
262901c49d82d1e051250eda476fc448_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
262901c49d82d1e051250eda476fc448_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
262901c49d82d1e051250eda476fc448_JaffaCakes118
-
Size
367KB
-
MD5
262901c49d82d1e051250eda476fc448
-
SHA1
70e85dfc3d4ad0024deec3e20a37cd88dfe4d867
-
SHA256
329f1f114c31af7d1df517a8efe1ee2eab3a4c244d14b29fdbff626e66ff85a1
-
SHA512
9d1443e87fb4c4e219e8b27431af5637df3112ae0d29c53f2db488ecd1675d1b7758ba948ddbdc96377208a432bfcfdbcc79967a1f5bfc0f70423a51a4918158
-
SSDEEP
6144:uRMjshrVf/DRauRHlwrFYaN5ino7241GtMqzIXPH8CV+mybPzKP3zUeXm9+r:uRMjKrpDneFNzino7IUHybPzQjUeX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 262901c49d82d1e051250eda476fc448_JaffaCakes118
Files
-
262901c49d82d1e051250eda476fc448_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd7ceb5c8bacd57b600fc561b7596b14
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeW
TlsGetValue
EnterCriticalSection
GetCurrentProcessId
GetCurrentThreadId
EnumCalendarInfoW
GetConsoleAliasW
GetModuleFileNameA
ReadFile
FindAtomW
LocalFree
GetModuleHandleA
GetNumberFormatW
HeapCreate
SetLastError
GetPrivateProfileStringW
SetEvent
FindClose
lstrlenW
ResumeThread
user32
DrawTextA
GetClassInfoA
GetKeyState
GetClientRect
DispatchMessageA
GetMenuInfo
DispatchMessageA
IsWindow
GetCursorInfo
GetKeyboardType
GetSysColor
SetFocus
CallWindowProcW
wsnmp32
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
msasn1
ASN1BERDecBool
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 357KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ