Static task
static1
Behavioral task
behavioral1
Sample
300b543bcc901bece11cb0da5a58bca9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
300b543bcc901bece11cb0da5a58bca9_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
300b543bcc901bece11cb0da5a58bca9_JaffaCakes118
-
Size
296KB
-
MD5
300b543bcc901bece11cb0da5a58bca9
-
SHA1
c031d57b24be8c98342549773ca6d37a05c5bff7
-
SHA256
a336df95e527ff6c4ddd6ee91a4349942eb4f40be20e0834e27dc6d18e06b8f5
-
SHA512
7bbe9257fcdbe9f3b429f88a8e13de2374a37ed848614f513c79e44b5acd8572a3286aaac6693c470649f1d266bfcc868522d3ee927fdb0b2ffc262443ec29f4
-
SSDEEP
6144:jpBdYtntb7lrGj7fuO5nJhfNYWr7wrfesLx9ZOmwvS3mB1Ga:dBdalr27fJ5SBLfZOHv7+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 300b543bcc901bece11cb0da5a58bca9_JaffaCakes118
Files
-
300b543bcc901bece11cb0da5a58bca9_JaffaCakes118.exe windows:4 windows x86 arch:x86
a11c618627591b851c6481aedcb822c1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateEventA
CreateThread
EnterCriticalSection
ExitThread
FindNextFileA
FreeLibrary
GetComputerNameA
GetFileSize
GetModuleFileNameA
GetProcessHeap
GetSystemDefaultLCID
GetTickCount
GlobalAlloc
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalSize
OpenEventA
SetEvent
SetFilePointer
Sleep
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
lstrcatA
lstrcpyA
lstrlenA
user32
AdjustWindowRectEx
DispatchMessageW
DrawFocusRect
EnableWindow
EndDialog
EndPaint
FindWindowW
GetKeyState
GetLastActivePopup
GetMessagePos
GetWindowPlacement
IsDlgButtonChecked
LoadImageW
MoveWindow
PostMessageW
SendMessageCallbackW
SetCapture
SetRectEmpty
TrackPopupMenu
UnregisterHotKey
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 281KB - Virtual size: 283KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ