Static task
static1
Behavioral task
behavioral1
Sample
391fbfebacbc58b4d09eb584c170789c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
391fbfebacbc58b4d09eb584c170789c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
391fbfebacbc58b4d09eb584c170789c_JaffaCakes118
-
Size
342KB
-
MD5
391fbfebacbc58b4d09eb584c170789c
-
SHA1
a27bb0872c059ddecb6b8a23a4749cfec844c6de
-
SHA256
6bf318da4c945874048f4f7071714189860537651e8a7830a9e2ffcefcfc36e1
-
SHA512
de46c54eed9214e997033720566b2dd1ec6329a7df42edd3da71c32c06624f4019a2f8a7e9611a30aff997f76dbc54cebe53a06095616fc76f127fe65fa1c66b
-
SSDEEP
6144:oTtGZLcSj5PSXyggMfOLRTYO+9wTLfdvyhEwFUsjRLTt+/z4eq3h:VFhgh2R8O+yFqpLh+rqh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 391fbfebacbc58b4d09eb584c170789c_JaffaCakes118
Files
-
391fbfebacbc58b4d09eb584c170789c_JaffaCakes118.exe windows:4 windows x86 arch:x86
22b1452455edd93031b08ee0eacc6daf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GlobalUnlock
LocalFree
LoadLibraryExA
GetConsoleCP
CreateEventA
CreateFileA
IsDebuggerPresent
lstrlenA
IsBadReadPtr
FreeEnvironmentStringsA
CreateFileMappingA
GetStdHandle
FindClose
CloseHandle
CreateWaitableTimerA
GetModuleHandleA
HeapCreate
GetACP
GlobalLock
user32
SetFocus
GetMessageA
CheckMenuItem
DispatchMessageA
ClipCursor
EndDialog
GetSubMenu
GetDlgItem
GetDlgItemTextA
DialogBoxParamA
GetParent
IsMenu
RedrawWindow
DrawIconEx
apphelp
ApphelpCheckIME
SdbCloseDatabase
SdbFindFirstTag
ApphelpShowDialog
ApphelpCheckRunApp
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ