Static task
static1
Behavioral task
behavioral1
Sample
444e20a9f31c0fde3c7f64e16d20596f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
444e20a9f31c0fde3c7f64e16d20596f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
444e20a9f31c0fde3c7f64e16d20596f_JaffaCakes118
-
Size
89KB
-
MD5
444e20a9f31c0fde3c7f64e16d20596f
-
SHA1
ceb5c82983069cad2f370ecc1118d15666cedc88
-
SHA256
f55d710422f1e71f9325430c51017c58d1bbac96b0d4eee1eae5fbb5c3336555
-
SHA512
e7e2546d07a0e0f79ac3311cbdc05bb73ffb4376b388390df678f80023a2bfce7c018ea577d5cd977f0c86cb969230bca812bd8a4d74fa18f10ae5c55c7735f1
-
SSDEEP
1536:yedrPdumCETcbByedrPdu5iCETcbBe7g5:ywrEmCEYywrEkCEYr5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 444e20a9f31c0fde3c7f64e16d20596f_JaffaCakes118
Files
-
444e20a9f31c0fde3c7f64e16d20596f_JaffaCakes118.exe windows:4 windows x86 arch:x86
46b8a895683d3f49c33ec9d8f2413079
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
FindClose
FreeEnvironmentStringsA
IsBadReadPtr
TlsGetValue
CloseHandle
HeapCreate
GetModuleHandleA
CreateEventA
LocalLock
LocalUnlock
GetConsoleCP
IsDebuggerPresent
CreateFileMappingA
WaitForSingleObject
LocalFree
LoadLibraryExA
GetLastError
GetStdHandle
CreateFileA
user32
GetMessageA
IsWindow
GetDlgItem
CreateDialogParamA
ScrollWindow
DispatchMessageA
SetFocus
PostMessageA
EndMenu
EmptyClipboard
GetDC
GetIconInfo
DefWindowProcA
DrawIconEx
msasn1
ASN1BEREncFlush
ASN1BERDecCheck
ASN1BERDecBool
ASN1BEREncLength
ASN1BERDecEoid
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE