Static task
static1
Behavioral task
behavioral1
Sample
296e0018beb93efeb10945f7e5d98c22_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
296e0018beb93efeb10945f7e5d98c22_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
296e0018beb93efeb10945f7e5d98c22_JaffaCakes118
-
Size
321KB
-
MD5
296e0018beb93efeb10945f7e5d98c22
-
SHA1
1b753888220b1a1f3225499e46a32fd71687b495
-
SHA256
866ea028ea80e12cf5401fd0ddb1618efce72ef10218d6eda5751ac55bbd992b
-
SHA512
2dfeb6cf17a1c5b5e4de6d07962a8d1294d07640f68088b40a895a12fab8ac9a25d48e1153ed3c4ad4ee420745c0098103bbe6c7490c789547c3804a63003783
-
SSDEEP
6144:YdVhzctJoYKS6/TJ80uIe1NF/5dVI4vYXbuleeehcJY1CZ/Hko8ZjJjsXPpPkYfE:YdctJM/TJXe1RLYrutehGZ/v6JAXhMYs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 296e0018beb93efeb10945f7e5d98c22_JaffaCakes118
Files
-
296e0018beb93efeb10945f7e5d98c22_JaffaCakes118.exe windows:4 windows x86 arch:x86
18a9df0d4adb2066b8d5899769e71927
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LockResource
LoadLibraryExA
RaiseException
FoldStringA
GlobalFree
HeapCreate
GetLocaleInfoA
SetConsoleOutputCP
GetStdHandle
Sleep
SetErrorMode
GetDriveTypeA
EnterCriticalSection
VirtualProtect
InterlockedExchange
GlobalUnlock
GlobalDeleteAtom
GetACP
CloseHandle
GlobalAddAtomA
GetLastError
user32
GetCursorPos
GetActiveWindow
DrawTextA
ValidateRect
GetWindowTextA
ClipCursor
GetClassNameA
GetParent
IsIconic
CharToOemBuffA
GetFocus
GetMenuItemInfoA
GetWindow
ShowWindow
SetForegroundWindow
DrawEdge
BeginPaint
EndPaint
ReleaseDC
version
GetFileVersionInfoA
VerFindFileA
VerQueryValueA
VerInstallFileA
GetFileVersionInfoSizeA
rasadhlp
WSAttemptAutodialName
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 704KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ