Static task
static1
Behavioral task
behavioral1
Sample
36c736f3702d9b771803087e34c74be8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
36c736f3702d9b771803087e34c74be8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
36c736f3702d9b771803087e34c74be8_JaffaCakes118
-
Size
715KB
-
MD5
36c736f3702d9b771803087e34c74be8
-
SHA1
40b0a0215494d59fa342e5f8682f35783de0aa12
-
SHA256
cea12571c7d835572202b648bf0cf8e225bf935b738864c284bcc81273c0fa6e
-
SHA512
212081a107cb03213ddd56c67e62be9e89dc472a11932d7c8d0704713e9d38932e4c3b76fbd51237dcb15e23ff93cf544e015c4aab476cb29a79f9b9d7b7e81a
-
SSDEEP
12288:VUqxSEDT5n4GhQn8LnzB4XG0wBtuycNTpvWLQ8c9GwtW8rsxyC3fpQ:ZkyTyxnSN4XG00tsL+LQ8cswQwsYC3hQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36c736f3702d9b771803087e34c74be8_JaffaCakes118
Files
-
36c736f3702d9b771803087e34c74be8_JaffaCakes118.exe windows:4 windows x86 arch:x86
ce734a27da167a27e3a062c7386a6d36
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
GetModuleHandleA
lstrlenA
GetConsoleCP
CloseHandle
GetTickCount
WaitForSingleObject
CompareFileTime
ResetEvent
GetAtomNameA
GlobalUnlock
TlsFree
LoadLibraryW
SetEvent
VirtualProtect
GetVersion
HeapWalk
HeapReAlloc
FindAtomA
GetProfileIntA
InterlockedExchange
user32
GetMenuStringA
GetScrollRange
GetParent
LoadIconA
ScrollDC
GetMenu
PostQuitMessage
ShowWindow
GetSubMenu
PostMessageA
InsertMenuA
GetDlgItem
GetKeyboardLayout
SetWindowPos
SetPropA
EnableScrollBar
MessageBoxA
DispatchMessageA
SetSysColors
DialogBoxParamA
DestroyMenu
InflateRect
GetWindowTextA
ModifyMenuA
GetWindowLongA
CopyRect
UpdateWindow
EqualRect
TranslateMessage
msi
MsiCloseHandle
MsiEnumClientsA
MsiGetMode
MsiEnumProductsA
MsiDoActionA
apphelp
ApphelpCheckExe
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ