Static task
static1
Behavioral task
behavioral1
Sample
29c6a66012cae1d6ae30a21db5d4f04f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
29c6a66012cae1d6ae30a21db5d4f04f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
29c6a66012cae1d6ae30a21db5d4f04f_JaffaCakes118
-
Size
338KB
-
MD5
29c6a66012cae1d6ae30a21db5d4f04f
-
SHA1
979749a903efe4e2f96222ce64dfaffd230d277a
-
SHA256
1f915b9d2a1e0145147e69f561f5023d92305a2a8e602da528e02f962191567f
-
SHA512
074beb9cd51e305e6db7070d190cbbe06b804cf92e9cff0380037799cd907734fca53ec21e29e06673af58da90c909d7bedc88f7260f12d9487d18f604236ff7
-
SSDEEP
6144:0nc64DCtD752cycYt4Tl9HSw4T2xmEKhDYfJE9kfIy4jNYoZooqwNgO:0cdK75tHYt4rj4TCxDfIyUjodO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29c6a66012cae1d6ae30a21db5d4f04f_JaffaCakes118
Files
-
29c6a66012cae1d6ae30a21db5d4f04f_JaffaCakes118.exe windows:4 windows x86 arch:x86
0729c5bb3e9204487673ae7fb0fad879
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
FindClose
HeapDestroy
GetCommandLineA
GlobalMemoryStatus
HeapCreate
GetStdHandle
GetCurrentProcessId
CreateIoCompletionPort
LoadLibraryExA
GetTimeFormatA
IsDebuggerPresent
GetACP
InterlockedExchange
VirtualProtect
GetTapeStatus
GetOEMCP
GetModuleHandleA
GetCurrentThread
HeapQueryInformation
GetProcessHeap
user32
GetClassNameA
GetFocus
DrawTextA
DragDetect
GetDlgItem
EndPaint
GetTitleBarInfo
FillRect
GetParent
GetCursorPos
ShowWindow
wsprintfA
GetWindow
FrameRect
GetWindowTextLengthA
SetActiveWindow
ReleaseDC
BeginPaint
SetForegroundWindow
gdi32
CreatePalette
GetLayout
CloseFigure
GetClipBox
CreateBitmap
userenv
DeleteProfileA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 780KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ