Static task
static1
Behavioral task
behavioral1
Sample
36b7bc3389ebb2ae3bcd301af0ebbd7f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
36b7bc3389ebb2ae3bcd301af0ebbd7f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
36b7bc3389ebb2ae3bcd301af0ebbd7f_JaffaCakes118
-
Size
154KB
-
MD5
36b7bc3389ebb2ae3bcd301af0ebbd7f
-
SHA1
54caa5ec8099a7a2a40104233e60dc233578b3bb
-
SHA256
5bc69ad51065a14ba7d6d2a913c97dc87f711562583faf0892461edc9ba5f35a
-
SHA512
bb6a3178a8f6bd8bb3c9de1a20a95bede7311ab7d9e8510c811a7b2117d1779f0e8119ba334475223d4101bff73222067edd3052920420296278f8f03fa742d7
-
SSDEEP
3072:pzyE6juGiIIDtcec/1oHsni56l+u0qZWjkTzofYYbmbGwIIRa6XFFSK9:pF6jEIdr4m06lFErfZCdIR6VAa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36b7bc3389ebb2ae3bcd301af0ebbd7f_JaffaCakes118
Files
-
36b7bc3389ebb2ae3bcd301af0ebbd7f_JaffaCakes118.exe windows:4 windows x86 arch:x86
d9d20ae7f97dc5964e84bf9a5be4dfad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
OpenMutexA
InterlockedExchange
GetModuleHandleA
GetConsoleCP
GetTickCount
GetProfileIntA
GetCommandLineA
GetSystemDefaultLangID
HeapReAlloc
GetVersion
VirtualProtect
lstrlenA
SuspendThread
WaitForMultipleObjects
CompareFileTime
CloseHandle
GetStdHandle
HeapCreate
AddAtomA
GlobalUnlock
user32
DispatchMessageA
InsertMenuA
CreateMenu
DispatchMessageA
DestroyMenu
SetPropA
SetWindowPos
GetKeyboardLayout
EnableScrollBar
GetDlgItem
GetKeyState
DragObject
CreateIcon
GetCursorInfo
CreateCursor
IsDialogMessage
InvertRect
DialogBoxParamA
MessageBoxA
CopyImage
FindWindowA
DrawCaption
SetScrollInfo
advapi32
RegEnumKeyA
RegCloseKey
RegQueryInfoKeyA
RegEnumValueA
RegCreateKeyExA
uxtheme
GetThemeColor
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 524KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ