Static task
static1
Behavioral task
behavioral1
Sample
4250213760976dcfc1aa592c600dc51f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4250213760976dcfc1aa592c600dc51f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4250213760976dcfc1aa592c600dc51f_JaffaCakes118
-
Size
342KB
-
MD5
4250213760976dcfc1aa592c600dc51f
-
SHA1
9aff9fe68988432188a4bb4412d7c92e5a3a1c14
-
SHA256
156d36a0a682f24005e2ac5ce97616503b230d17785bebc444de934e6fed5c19
-
SHA512
e935fefe826e70323229cb0ea8174df10a950ededf92411e3b03d090c4d6051ecb6ebfb932ff9ec2cf1dcdbe84a4bc825c1bf9f57ac27c1df36456abd48c7dbf
-
SSDEEP
6144:itj2S9Beu7vLKU5m0+iiZHJoa5qT0Ag6oFFRBGnGCRxX6Kmv:VyBe2Y0+iiZpJNANCFRBGGcl6K4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4250213760976dcfc1aa592c600dc51f_JaffaCakes118
Files
-
4250213760976dcfc1aa592c600dc51f_JaffaCakes118.exe windows:4 windows x86 arch:x86
f22e54f117d78260d2fbf367db35b315
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalLock
IsBadReadPtr
GetModuleHandleA
GetPrivateProfileIntA
HeapCreate
CreateFileMappingA
GetStdHandle
lstrlenA
LocalFree
CloseHandle
GetLastError
FindClose
FreeEnvironmentStringsA
CreateFileA
GlobalUnlock
GetConsoleCP
IsDebuggerPresent
LoadLibraryExA
GetACP
CreateEventA
user32
GetIconInfo
SetFocus
GetDC
EndDialog
GetDlgItem
GetListBoxInfo
RedrawWindow
IsWindow
GetMessageA
CheckMenuItem
DispatchMessageA
DialogBoxParamA
GetDlgItemTextA
DrawIconEx
uxtheme
GetThemeColor
DrawThemeIcon
CloseThemeData
GetThemeMetric
EnableTheming
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ