Static task
static1
Behavioral task
behavioral1
Sample
289bdfcb7b3e982864c7fc7d1f237cb5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
289bdfcb7b3e982864c7fc7d1f237cb5_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
289bdfcb7b3e982864c7fc7d1f237cb5_JaffaCakes118
-
Size
338KB
-
MD5
289bdfcb7b3e982864c7fc7d1f237cb5
-
SHA1
77642417fc8a9b2cea7e91e5212ca84765b1ee78
-
SHA256
1448d2667e4212af22d3c828d571a7f1c4dd13f5067760686fe769b16f52bfb5
-
SHA512
7d7b11cf842267fba994de585f0a94ef06d07e38c774345519c0c4d06dfc237d76a25fb0d4a9188addc4b86c0bf581deed5e9cfb547343d85eca22ccf43258c6
-
SSDEEP
6144:wG8hNXwsB55w4JkH7ABgYOaoFKrvfKhv26D21xx1OPJJBgfGKEO4R20/7oJB:dUXwsz5w46bfYloFKzy92G21X1CJBybt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 289bdfcb7b3e982864c7fc7d1f237cb5_JaffaCakes118
Files
-
289bdfcb7b3e982864c7fc7d1f237cb5_JaffaCakes118.exe windows:4 windows x86 arch:x86
94f89e90cffb8fedd8520385cdb0b2cc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
HeapCreate
GetACP
GetTimeFormatA
GetOEMCP
PeekConsoleInputA
IsDebuggerPresent
GetTapeStatus
GetModuleHandleA
GetSystemDefaultLCID
GetSystemTime
GetCommandLineA
HeapDestroy
LoadLibraryA
WaitForSingleObject
VirtualProtect
GetCurrentProcessId
ResumeThread
GetStdHandle
GlobalMemoryStatus
GlobalSize
user32
FillRect
DragDetect
GetClassNameA
BeginPaint
SetForegroundWindow
GetTitleBarInfo
GetWindowTextLengthA
AnyPopup
EndPaint
wsprintfA
GetCursorPos
GetDC
GetWindow
ShowWindow
FrameRect
GetFocus
DrawTextA
ReleaseDC
GetParent
atl
AtlUnadvise
AtlModuleInit
AtlAdvise
AtlGetVersion
AtlModuleTerm
msutb
GetPopupTipbar
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 780KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ