Static task
static1
Behavioral task
behavioral1
Sample
32b1ce2e3751ee143775c6383b9d7868_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
32b1ce2e3751ee143775c6383b9d7868_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
32b1ce2e3751ee143775c6383b9d7868_JaffaCakes118
-
Size
42KB
-
MD5
32b1ce2e3751ee143775c6383b9d7868
-
SHA1
0f3e15eebbb24f69ef569cec37931d821d3a18ae
-
SHA256
9033eee592443e0ca12def0c769710bb98ba6b816b9fc5b0e6b2f9197901dd8e
-
SHA512
df1f9aeaed4aab25bc238446e39b6b5a6956a07f1031e5125a76bace286f6d9b3c234b32f7acc76c18084f1eb3a8e19a6a713410bf3aa3bcd69aab13567375a6
-
SSDEEP
768:1hbwK05nBAX5+cErd7yjHnCNtAxrDnnPAawtnSfKXj:Q75naX5+ciBuiNtARDnPAazfKz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32b1ce2e3751ee143775c6383b9d7868_JaffaCakes118
Files
-
32b1ce2e3751ee143775c6383b9d7868_JaffaCakes118.exe windows:4 windows x86 arch:x86
7b5050909aaf8724070ff787c6d0bab7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExW
FreeEnvironmentStringsA
FreeConsole
CloseHandle
lstrlenA
GetACP
LocalFree
CreateEventA
GetModuleHandleA
OpenMutexA
GlobalUnlock
IsBadReadPtr
GlobalLock
GetSystemTime
FindClose
GetLastError
OpenMutexA
GetStdHandle
ResumeThread
VirtualProtectEx
user32
IsMenu
ClipCursor
GetSubMenu
GetDlgItemTextA
DialogBoxParamA
EndDialog
GetMessageA
CreateWindowExA
GetMessageA
LoadCursorA
IsIconic
SetFocus
GetComboBoxInfo
MessageBoxA
msasn1
ASN1BEREncNull
ASN1BERDecBool
ASN1BERDecCheck
ASN1DecAlloc
ASN1BEREncOpenType
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ