Static task
static1
Behavioral task
behavioral1
Sample
29b968fab0bb0ac3685de5a1b5efa0d2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
29b968fab0bb0ac3685de5a1b5efa0d2_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
29b968fab0bb0ac3685de5a1b5efa0d2_JaffaCakes118
-
Size
393KB
-
MD5
29b968fab0bb0ac3685de5a1b5efa0d2
-
SHA1
9d96fb2734ada3bea0ed17fe48cf64fa54dc3f30
-
SHA256
0245be0e01c8470a87f0ee5b80d25745855ebe95ee0d826f7ebb222163a8d7b1
-
SHA512
1187a5457c22d5949d28ea3bac79ac3c12b30a548d9c71fc876c3201ce1d220050a2ebd136a593e4fdbc45f4be99d9e8fddd30e09cc3cba6f15c6502efbadd26
-
SSDEEP
6144:I9oo5nhxlGFWPgynsiNYBoGFFYhaRRXcuCiX++Vzrmkqmu5jbmdVnLXJUhF:9QnhxUUSbuGFehOsuC8XmklbLXJUD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29b968fab0bb0ac3685de5a1b5efa0d2_JaffaCakes118
Files
-
29b968fab0bb0ac3685de5a1b5efa0d2_JaffaCakes118.exe windows:4 windows x86 arch:x86
3157622df527318f30891a1a26f74b41
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
CreateFileA
WaitNamedPipeA
LocalFree
GetConsoleAliasW
FindAtomA
CloseHandle
GlobalUnlock
CreateFileMappingA
TlsGetValue
LocalLock
GetModuleHandleA
HeapCreate
GetConsoleCP
Sleep
GetACP
ExitProcess
GetLastError
LoadLibraryExA
FreeEnvironmentStringsA
user32
IsWindow
GetDlgItem
DispatchMessageA
CheckRadioButton
GetIconInfo
CallWindowProcA
FillRect
DrawEdge
DefWindowProcW
DrawTextA
SetFocus
GetDC
CopyRect
MessageBoxA
clbcatq
InprocServer32FromString
SetSetupSave
GetCatalogObject
GetComputerObject
SetSetupOpen
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ