Static task
static1
Behavioral task
behavioral1
Sample
401bfe244e29fbd3ce5642bd3824af6b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
401bfe244e29fbd3ce5642bd3824af6b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
401bfe244e29fbd3ce5642bd3824af6b_JaffaCakes118
-
Size
292KB
-
MD5
401bfe244e29fbd3ce5642bd3824af6b
-
SHA1
f51bd2cc860b6bdee1d4f6f01a05966a5d8b019a
-
SHA256
63713afc5608a385999193117bdbd3fcc3915cd86dc89a6e8566b4a4e31b10d7
-
SHA512
b8fc9d72d37397009fcec0bab3fd648a555c53d5fb70b5344e0fbd7b72bc41f89f95f143fea6a4964e03b6993e0175c89faa42337931e74aeb5667a790746f35
-
SSDEEP
3072:ttybVBducRB+f9fexh+OIfZNGDjoFcThbMzcBfMgjpaTUY5icCkARl0aNrHNMt:QLR8ZexYOIfGDjicdVjpaTU/cJKVg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 401bfe244e29fbd3ce5642bd3824af6b_JaffaCakes118
Files
-
401bfe244e29fbd3ce5642bd3824af6b_JaffaCakes118.exe windows:4 windows x86 arch:x86
fee4657d473d93d4f6520cdabacacd71
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
user32
MessageBoxA
FindWindowA
FillRect
msvcrt
__setusermatherr
strcmp
memcpy
malloc
free
_exit
_XcptFilter
exit
__getmainargs
_initterm
_acmdln
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 684B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 248KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ