Static task
static1
Behavioral task
behavioral1
Sample
459ab9d081a1e79dd5aa58ba5b4e2866_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
459ab9d081a1e79dd5aa58ba5b4e2866_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
459ab9d081a1e79dd5aa58ba5b4e2866_JaffaCakes118
-
Size
88KB
-
MD5
459ab9d081a1e79dd5aa58ba5b4e2866
-
SHA1
400af2efc53224ecd8ed290d73ac691e1529a24f
-
SHA256
c3df8f63381125dc23d9901e705604a40e394701928f25382d9aa55c0e4c38a5
-
SHA512
29ade4e52f429d76fe8c4ce726b29800d1ef2cdf7955c3d093c17def3d68bebf410ec3eb4d828e4a23852ac7a1d48444e090229d4f836cb05658dba34bb192d5
-
SSDEEP
1536:KOUhCCdVuUB24Ngwy6SogaaQg2Qz+lJG42rgw:FcCCuS24NfyogaaQdQzt428
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 459ab9d081a1e79dd5aa58ba5b4e2866_JaffaCakes118
Files
-
459ab9d081a1e79dd5aa58ba5b4e2866_JaffaCakes118.exe windows:4 windows x86 arch:x86
8c698064fa3a301b3e9dc186cbca755c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
GetLastError
CloseHandle
FreeConsole
GetDateFormatA
GetModuleHandleA
LocalFree
GetDiskFreeSpaceExW
SetLastError
PulseEvent
GetCommandLineA
TlsGetValue
LoadLibraryExW
Sleep
IsBadReadPtr
EnumResourceTypesA
IsBadCodePtr
FindClose
DeleteCriticalSection
GetDriveTypeW
user32
GetScrollBarInfo
CreateWindowExA
DispatchMessageA
CreateMenu
GetMessageA
DialogBoxParamA
IsIconic
CopyImage
CloseWindow
EnableWindow
GetKeyState
DragDetect
GetUpdateRect
msasn1
ASN1BERDecFlush
ASN1BERDecEoid
ASN1BERDecCheck
ASN1BERDecBool
ASN1BERDecDouble
advapi32
RegCloseKey
Sections
.text Size: 1024B - Virtual size: 700B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ