Static task
static1
Behavioral task
behavioral1
Sample
424a3af51d285d4ab0b9c0c19f2b9545_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
424a3af51d285d4ab0b9c0c19f2b9545_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
424a3af51d285d4ab0b9c0c19f2b9545_JaffaCakes118
-
Size
104KB
-
MD5
424a3af51d285d4ab0b9c0c19f2b9545
-
SHA1
f4604ca639c5558ac36334544d066297c86ec603
-
SHA256
756eaa23f996e61bf0471330e682b13ce07cb499fc96bcbcd72539a1f40b80f0
-
SHA512
1d5250c2ac0f3473d4c69955317bacead09ac77df547fcaf6416afe02debb955483931965e7720d3df45e06a318e5bd53ceaf2b61b064bb91b1ae9617a438afb
-
SSDEEP
1536:7UoFrPWqYPWJSHFTU7A3dF3zWWnLxwqYNmCyEgYdv8xNJz0J1Uk:79i7PgSHFTU7A3d5JLxwqYEEgYw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 424a3af51d285d4ab0b9c0c19f2b9545_JaffaCakes118
Files
-
424a3af51d285d4ab0b9c0c19f2b9545_JaffaCakes118.exe windows:4 windows x86 arch:x86
938fead9f05737a36c1f9eba879def7b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetLastError
DeleteFileW
GetCPInfo
ReadFile
ExitThread
GetFileSize
Sleep
WriteFile
DeleteAtom
ReadConsoleA
FindFirstFileA
GetComputerNameA
FindAtomA
GetFileTime
OpenFileMappingA
GlobalFree
DeleteFileA
GetCommandLineA
GetConsoleMode
GetStdHandle
OpenFile
CreateThread
user32
InsertMenuA
EndDialog
GetWindowTextA
LoadCursorA
CopyImage
CreateIcon
CopyRect
GetDlgItem
DrawIconEx
GetCursor
GetMenu
DialogBoxParamA
GetFocus
LoadMenuA
DrawTextW
IsWindow
DialogBoxParamW
DrawIcon
GetDC
CloseWindow
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbs Size: - Virtual size: 56KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 194B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 516B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ