Static task
static1
Behavioral task
behavioral1
Sample
60cb3a56cb443cfb8ea417d2b7c52b16_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
60cb3a56cb443cfb8ea417d2b7c52b16_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
60cb3a56cb443cfb8ea417d2b7c52b16_JaffaCakes118
-
Size
391KB
-
MD5
60cb3a56cb443cfb8ea417d2b7c52b16
-
SHA1
0212569c6fe075c66fc2eafeadcfa766b51f8c3f
-
SHA256
5d60f98906c8919c560e173c599f99e03c5f97d46f01ef9cc5d7d44ee8b85b87
-
SHA512
499f6276881312012369c7a68e7dc7825f2c163295afab3b3befcdb2b2a9a2a9e36d7fd3a71ef37fd66f55b9d554c80ad6abbd3541c8024488f76282fb1a0666
-
SSDEEP
12288:gtRMQHEAJLjpFv6w2K/PkFtlVMHFWg1EOfoMzCc3Sa0n:gtRMQkAJLjpFvN/ytkjEOfoMWN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60cb3a56cb443cfb8ea417d2b7c52b16_JaffaCakes118
Files
-
60cb3a56cb443cfb8ea417d2b7c52b16_JaffaCakes118.exe windows:4 windows x86 arch:x86
3c427a75199bb6687a0c7eb73d95b2c6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFlags
LocalFree
GetEnvironmentVariableW
lstrlenW
GetCurrentThreadId
CloseHandle
ReleaseMutex
GetDriveTypeA
GetFileTime
ReleaseMutex
HeapCreate
WriteFile
CreateEventW
GetPrivateProfileStringA
IsBadStringPtrW
TlsGetValue
FindClose
InitializeCriticalSection
GetCurrentProcessId
LoadLibraryW
user32
GetSysColor
CreateWindowExA
GetKeyboardType
GetSysColor
GetClientRect
DrawStateW
SetFocus
CallWindowProcW
GetClassInfoA
DispatchMessageA
DrawTextA
IsWindow
EndDialog
qcliprov
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
advapi32
InitializeSid
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 381KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ