Static task
static1
Behavioral task
behavioral1
Sample
607d5727ab872cc995e6f41bc879cc48_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
607d5727ab872cc995e6f41bc879cc48_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
607d5727ab872cc995e6f41bc879cc48_JaffaCakes118
-
Size
92KB
-
MD5
607d5727ab872cc995e6f41bc879cc48
-
SHA1
becae1684eeb83398e3f9becc6b7823d98c1790c
-
SHA256
2e47e0414663ec2c73bcb70d7924dd42ac382fa5514aacee2cdd7c36e3bcf60e
-
SHA512
fd00a2199e1ee5a893ac8c11a16237f144406686ac4eee91f3012c1245702620cd5631be1981c216275c72a65e7653c98ae1f104ad4c15c50fdbb3ad92870d30
-
SSDEEP
1536:VZ2aSm3pxoxL7bNY6OQvxGaOWYU0ZND3OUL3MpkJm2CfujMB5f:VZIm5xox3bNYpQvDhYjrDe83jJmBzF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 607d5727ab872cc995e6f41bc879cc48_JaffaCakes118
Files
-
607d5727ab872cc995e6f41bc879cc48_JaffaCakes118.exe windows:4 windows x86 arch:x86
299ebe882a71d075c63aaa50807cdc76
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
LoadLibraryA
GetProcAddress
HeapReAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetLastError
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
CloseHandle
user32
GetDlgItemTextA
MessageBoxA
SetDlgItemTextA
EndDialog
SendMessageA
GetDesktopWindow
GetWindowRect
SetWindowPos
LoadIconA
DialogBoxParamA
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ