Static task
static1
Behavioral task
behavioral1
Sample
4555206fce7143d2b71a5ae667fb2611_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4555206fce7143d2b71a5ae667fb2611_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4555206fce7143d2b71a5ae667fb2611_JaffaCakes118
-
Size
342KB
-
MD5
4555206fce7143d2b71a5ae667fb2611
-
SHA1
417f710078f543e5c43938ccdd1e87c953a327cb
-
SHA256
fc765f4be50f7013dfacc83e16cc10d958f5b963e87aff29f0678d06e707dad4
-
SHA512
e467785e00c1cf294e1faaf5564551d3a052a0e84bf3550099fd3bc42ee26d59946a9268a218c2d0fb53c653765fd1a20fcff0710a272a30b0b0b7ea52aeaa96
-
SSDEEP
6144:qnt5YveIk44ai9PakfDYtlUKS2pf/xYLcu5NC9wXMq0jKI/gOwTnq4:KYvDsakbClM2pxYB3CuM/xbr4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4555206fce7143d2b71a5ae667fb2611_JaffaCakes118
Files
-
4555206fce7143d2b71a5ae667fb2611_JaffaCakes118.exe windows:4 windows x86 arch:x86
1dfbf2fe28f1570d7ce5d9e11d0330b2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsDebuggerPresent
CreateEventA
FreeEnvironmentStringsA
GlobalLock
LocalFree
CreateMailslotA
FindClose
GetStdHandle
CloseHandle
GlobalUnlock
GetLastError
GetModuleHandleA
GetConsoleCP
lstrlenA
CreateFileMappingA
LoadLibraryExA
HeapCreate
IsBadReadPtr
GetACP
CreateFileA
user32
DispatchMessageA
GetIconInfo
GetMessageA
EndDialog
GetDlgItemTextA
GetDC
GetDlgItem
DialogBoxParamA
SetFocus
CheckMenuItem
IsMenu
RedrawWindow
GetListBoxInfo
DrawIconEx
uxtheme
EnableTheming
CloseThemeData
GetThemeColor
GetThemeMetric
DrawThemeIcon
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ