Static task
static1
Behavioral task
behavioral1
Sample
411eb6e59db91f5677861dc974a002aa_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
411eb6e59db91f5677861dc974a002aa_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
411eb6e59db91f5677861dc974a002aa_JaffaCakes118
-
Size
498KB
-
MD5
411eb6e59db91f5677861dc974a002aa
-
SHA1
4a444b8649c9ef76bfac032158758dbbe0df717d
-
SHA256
e5a59885b27cfe0972aa9535c93e8c992ee48af830915e5f63a72d8bd6b9eeea
-
SHA512
4cc3cfc334e3f70a79a383a08672cd7413a20998b17aba47013c31ec44b0bcbf1dbea3e9be75d94dc18399a4dec666425bd717d48f1f8fa5c4cb841ae1dcf19a
-
SSDEEP
6144:AgghphvkZ8gulzV2V9/H5DTwaHd6dcNiXPnpUTJPyd+MElqwkp7:AdtMZu2z96dcYXPnpcJPydjZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 411eb6e59db91f5677861dc974a002aa_JaffaCakes118
Files
-
411eb6e59db91f5677861dc974a002aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
20cfbc506e7a60b0a315f82a8c589ad7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesA
TlsGetValue
lstrlenA
CreateFileMappingA
GetModuleHandleA
SuspendThread
HeapCreate
GetStartupInfoA
GetDriveTypeA
DeviceIoControl
IsDebuggerPresent
GetModuleFileNameW
Sleep
IsBadStringPtrA
GetACP
DeleteFileA
PulseEvent
TlsAlloc
CreateFileA
ReleaseMutex
user32
DispatchMessageA
CallWindowProcW
DestroyMenu
IsZoomed
DestroyWindow
GetIconInfo
FindWindowW
DispatchMessageA
IsWindow
PeekMessageA
LoadImageA
DrawTextW
GetWindowLongA
asycfilt
FilterCreateInstance
FilterCreateInstance
FilterCreateInstance
FilterCreateInstance
cryptui
WizardFree
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 491KB - Virtual size: 490KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ