Static task
static1
Behavioral task
behavioral1
Sample
3356258e367b1384dd2a8d58389eb470_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3356258e367b1384dd2a8d58389eb470_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3356258e367b1384dd2a8d58389eb470_JaffaCakes118
-
Size
56KB
-
MD5
3356258e367b1384dd2a8d58389eb470
-
SHA1
f5eb730cf590476e55bc87574c88972bafcd22bf
-
SHA256
9fdfd99731e6df04940eb28d337f3ac8f09dd2f02156771bf89d9a1991f8338c
-
SHA512
1ff468b7377e6a08c3cdcdc091f3a8bb935292d4b112038f2740080bf7741632d11a97cb50f85ee2048fbcb8788e195faf74152ee700b9f45444e9222c33424a
-
SSDEEP
768:SK/MuWcQ3/RhpHJUt/nlvHAp6MajfbWBmEdzEfyGtn3B596Dr99vif7qllYZA8cy:SK4Z/J0tvHAQMW0dzQyGtn8Dr9A8jpY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3356258e367b1384dd2a8d58389eb470_JaffaCakes118
Files
-
3356258e367b1384dd2a8d58389eb470_JaffaCakes118.exe windows:4 windows x86 arch:x86
ba938bca3dda30ab7bfb353cf78f2932
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadIconA
GetDlgItem
EnableWindow
DrawStateA
DispatchMessageA
DestroyCursor
CreateIconFromResourceEx
CloseWindow
CharToOemA
ChangeMenuA
ShowCaret
BeginPaint
kernel32
WriteFile
UnmapViewOfFile
TlsGetValue
MapViewOfFile
LoadLibraryA
GetPrivateProfileStringA
GetModuleHandleA
ExitThread
EnterCriticalSection
lstrcpyA
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE