Static task
static1
Behavioral task
behavioral1
Sample
412d7029a652786daf11e3e7a44c8a29_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
412d7029a652786daf11e3e7a44c8a29_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
412d7029a652786daf11e3e7a44c8a29_JaffaCakes118
-
Size
336KB
-
MD5
412d7029a652786daf11e3e7a44c8a29
-
SHA1
6132da29b3634ac6f2281e08450d097b2c12c8bd
-
SHA256
ece8541535c44b6e7e1b920f492b1419d112076155c23f6bca2b38eec4e874e8
-
SHA512
41fd686f9885be691e628d13acb8a834ab84baafd1ebb502b16b12d97d2ba8abf35640af416ea2d73daef5c470935e7a46e39ad7758769e2d54445c44dfb9e4c
-
SSDEEP
3072:IxWieBOxXRwidVpn0ks8LKyplAuDGXAqlH3vdCM1/B:IWiekhuidVpjjKplH3vb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 412d7029a652786daf11e3e7a44c8a29_JaffaCakes118
Files
-
412d7029a652786daf11e3e7a44c8a29_JaffaCakes118.exe windows:4 windows x86 arch:x86
8cb2a89c882caa59772b73202bea3895
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DialogBoxParamA
SendMessageA
SetDlgItemTextA
SetClipboardData
LoadIconA
OpenClipboard
MessageBoxA
EmptyClipboard
GetDlgItemTextA
EndDialog
CloseClipboard
kernel32
RtlMoveMemory
RtlZeroMemory
GlobalLock
CloseHandle
GlobalUnlock
ExitThread
GlobalFree
CreateThread
SetThreadPriority
ResumeThread
SuspendThread
ExitProcess
FindResourceA
GetModuleHandleA
GetTickCount
GlobalAlloc
Sleep
LoadResource
LockResource
SizeofResource
winmm
waveOutPrepareHeader
waveOutWrite
waveOutUnprepareHeader
waveOutRestart
waveOutReset
waveOutPause
waveOutOpen
waveOutGetPosition
waveOutClose
Sections
Size: 240KB - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE