Static task
static1
Behavioral task
behavioral1
Sample
604a9ba5a3155591dbcee70a1c1ef4cd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
604a9ba5a3155591dbcee70a1c1ef4cd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
604a9ba5a3155591dbcee70a1c1ef4cd_JaffaCakes118
-
Size
20KB
-
MD5
604a9ba5a3155591dbcee70a1c1ef4cd
-
SHA1
5d2cefb76a1a721a9418f4b87bb6dc037588447f
-
SHA256
7715c8cf67c702339d6e40f7a2d292b562d314c0ab18c01e5031865a8eaa1568
-
SHA512
11cb6bba165cbdc17a308f4a1147041372e5392a409fdd55c1d4b81c8c7eeaf188b142cebb9f1d32adea7cc9981f51c5fc561582ce4620a2f25217b62eaa4131
-
SSDEEP
384:y1p3NzA3aa/hwXj8r+CzEeblF67uFZ/tmCsZdS7wRRZdje:83Nxa/ssCt7uv/KE7mZdje
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 604a9ba5a3155591dbcee70a1c1ef4cd_JaffaCakes118
Files
-
604a9ba5a3155591dbcee70a1c1ef4cd_JaffaCakes118.exe windows:4 windows x86 arch:x86
2332cad5dbb1f2604324423e3db32dc2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
ExitProcess
ExitThread
GetModuleHandleA
GetSystemInfo
GetVersionExA
LocalAlloc
WaitForSingleObject
user32
BeginPaint
BlockInput
CharLowerA
CharUpperA
CloseWindowStation
CreateDialogParamA
CreateWindowExA
EndDialog
EnumDisplayMonitors
FindWindowA
FlashWindow
GetAsyncKeyState
GetClassInfoExA
GetProcessWindowStation
GetTopWindow
OpenWindowStationA
RegisterWindowMessageA
SetDlgItemInt
SetFocus
SetWindowTextA
ShowWindow
TranslateMessage
UpdateWindow
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ