Static task
static1
Behavioral task
behavioral1
Sample
419221fd871ee446f3c958c7a785da62_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
419221fd871ee446f3c958c7a785da62_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
419221fd871ee446f3c958c7a785da62_JaffaCakes118
-
Size
814KB
-
MD5
419221fd871ee446f3c958c7a785da62
-
SHA1
47f421ffc949e9dfb4960c7e89536a17cf789897
-
SHA256
647b21c0dabd2cecce113cf450221f5fba19423ef8d08faf00de481056dadce1
-
SHA512
04eb412fae2d0c38ab1af2a5584b729437e749ebdcf773f9611167b8a40efc6ea5e136dd57b414a97134682fdb90f55fb31b29e33c3aebe8e7164518a05361b1
-
SSDEEP
12288:DkJn6Sf2R1fRDEqUKyqIbwPwY6Rrcge7vwqMJRP718qjpbO0120IgrSfQ4HGSlmA:Sq5Nvntgrivwqyjpq0401kHRlzdBykz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 419221fd871ee446f3c958c7a785da62_JaffaCakes118
Files
-
419221fd871ee446f3c958c7a785da62_JaffaCakes118.exe windows:4 windows x86 arch:x86
60c2ff0342ac468778f34de5e4e34afa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
SetLastError
GetModuleHandleA
SetConsoleCursorInfo
UnmapViewOfFile
CreateMutexA
GetLastError
HeapDestroy
LocalUnlock
FreeEnvironmentStringsA
GlobalFree
Sleep
FindResourceA
CreateFileA
ExitProcess
HeapCreate
GetACP
FreeConsole
FindClose
LoadLibraryExW
user32
GetDlgItem
GetIconInfo
IsWindow
DrawEdge
DrawMenuBar
DefWindowProcW
CopyRect
GetFocus
CheckRadioButton
DispatchMessageA
CallWindowProcA
GetDC
FillRect
uxtheme
DrawThemeIcon
GetThemeSysInt
DrawThemeText
GetThemeRect
DrawThemeEdge
clbcatq
SetupOpen
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ