Static task
static1
Behavioral task
behavioral1
Sample
31b266fca772c1ef1311cd407477fd77_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
31b266fca772c1ef1311cd407477fd77_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
31b266fca772c1ef1311cd407477fd77_JaffaCakes118
-
Size
18KB
-
MD5
31b266fca772c1ef1311cd407477fd77
-
SHA1
1792f3c659e7bff72a0b043d4ab9246271be02c7
-
SHA256
8f35d162a3743ed8407874268cb6fd03a22ab1b1f67c63c8521ae0c62cb5841e
-
SHA512
bf9ca1a4c352e560ec63a287d73560ad33babec389cd53ae2a389252ff6bd8c120937e45c7cfdf0b6ec83a3234fe1e6b13df28a40098644c9e8fce34d06d8667
-
SSDEEP
192:zlPL/baC8P9tz+VUuZNlDe+xgUjkogCEIjC+j6n+o:zNDaCUMVlZe+xgy9jC+jvo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31b266fca772c1ef1311cd407477fd77_JaffaCakes118
Files
-
31b266fca772c1ef1311cd407477fd77_JaffaCakes118.exe windows:4 windows x86 arch:x86
3546bc4e1bd0e46b54e66009101ab57a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetThreadPriority
HeapDestroy
InterlockedExchange
LoadLibraryA
GetCurrentProcess
IsDebuggerPresent
HeapCreate
GetACP
GetTimeFormatA
GetCurrentThread
GetEnvironmentStringsA
VirtualProtect
GetCurrentProcessId
GetModuleHandleA
OpenSemaphoreA
DeleteAtom
GetExpandedNameA
WriteConsoleA
FlushFileBuffers
FormatMessageA
GetStdHandle
user32
ReleaseDC
DrawTextA
GetParent
EndPaint
FillRect
GetWindow
SetActiveWindow
ValidateRgn
BeginPaint
GetClassNameA
FrameRect
GetFocus
GetWindowTextLengthA
GetCursorPos
ShowWindow
DragDetect
SetForegroundWindow
GetDlgItem
wsprintfA
advapi32
RegEnumKeyA
RegCreateKeyA
RegQueryInfoKeyA
RegFlushKey
RegCloseKey
clbcatq
CoRegCleanup
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ