Static task
static1
Behavioral task
behavioral1
Sample
26e90cb5877b205aac51dffe78cf48fa_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
26e90cb5877b205aac51dffe78cf48fa_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
26e90cb5877b205aac51dffe78cf48fa_JaffaCakes118
-
Size
278KB
-
MD5
26e90cb5877b205aac51dffe78cf48fa
-
SHA1
3e32dca791fcf404312478c0ab5fa36ed6b1c6d3
-
SHA256
8adff04e306dd5be6ab41ff799bb74a699f9dfaae9f27d09225020617bfa1e20
-
SHA512
a2f5f82b26a959d1d292c527fae78a93b290c9b21ffc06dd3fc86b2f4504749a0d59bf65bcf461ccbfa6dcdc6c25e77d4afbe27f35009b858d74d8e07516975c
-
SSDEEP
6144:+FcMxwNNpEp9qQyqkBAkiHtup6x9s6y5l:+uMxCpEp9VyqkmkCuM87
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26e90cb5877b205aac51dffe78cf48fa_JaffaCakes118
Files
-
26e90cb5877b205aac51dffe78cf48fa_JaffaCakes118.exe windows:4 windows x86 arch:x86
529a84561a76ab6faaceef5c3d5bf423
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
GetProfileStringA
CreateJobSet
GetTapeStatus
EnterCriticalSection
ExitProcess
EnumDateFormatsA
GetModuleHandleA
CreateMailslotA
CloseHandle
GetStdHandle
GetProfileIntA
LocalHandle
GetUserDefaultLangID
GetOEMCP
GetProcessHeap
GlobalFlags
VirtualAlloc
GetVolumePathNameA
FindAtomA
GlobalLock
user32
BeginPaint
GetDC
CloseWindow
GetForegroundWindow
GetWindowTextLengthA
ShowWindow
ValidateRect
RegisterClassA
GetParent
IsIconic
GetActiveWindow
EndPaint
DrawEdge
GetClassNameA
GetClassInfoExA
GetWindowTextA
ReleaseDC
GetWindow
GetFocus
gdi32
GetCharWidthA
GetColorSpace
CreateDCA
CreateDIBitmap
ExtCreatePen
sxs
SxsLookupClrGuid
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ