Static task
static1
Behavioral task
behavioral1
Sample
383844465673618368e0b5e3e76a4118_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
383844465673618368e0b5e3e76a4118_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
383844465673618368e0b5e3e76a4118_JaffaCakes118
-
Size
162KB
-
MD5
383844465673618368e0b5e3e76a4118
-
SHA1
8c20f5f1c7e1046dea46e5322dbb66bcd252595b
-
SHA256
1999d46061904b2d85a2caf944c1110d0bf7d5d5c74dbf37df6318d65546048d
-
SHA512
815a57b0ec7da9df85d60968b3d3465bdb91fe7963a2dc3e7d8ff6ace5ad0cf8a1e586b1f6475d2d05873f3a400f6dc680fb3e84cfd37073645d99c0aaf370d5
-
SSDEEP
768:Cqsw7Mzgv4BnhpGnS0BXAV8Jbdd/wU8gsQIh6pcoEQm83QCNOkQve3ndo:lw8gBnDzOwV8h3wU6QGA5Em37MPe3n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 383844465673618368e0b5e3e76a4118_JaffaCakes118
Files
-
383844465673618368e0b5e3e76a4118_JaffaCakes118.exe windows:1 windows x86 arch:x86
d4973f11c0b38c6681e55b05b1f266fd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetProcAddress
HeapReAlloc
lstrlenW
HeapReAlloc
GetACP
GetCurrentProcessId
ReadFile
GetCurrentProcessId
SetLastError
HeapDestroy
DeleteCriticalSection
GetCurrentProcess
HeapDestroy
lstrcpyW
lstrcpyW
GetModuleHandleW
ReadFile
GetStartupInfoW
GetCommandLineA
CreateThread
CreateFileW
GetACP
GetLastError
SetLastError
GetACP
FormatMessageW
EnterCriticalSection
WaitForSingleObject
GetCommandLineW
InterlockedIncrement
ReadFile
MultiByteToWideChar
GetLastError
GetCommandLineW
QueryPerformanceCounter
user32
GetDC
UpdateWindow
MoveWindow
GetSystemMetrics
ReleaseCapture
MapWindowPoints
DispatchMessageW
Sections
Size: 143KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�vmp0 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ