Static task
static1
Behavioral task
behavioral1
Sample
61133c9a08d9ea06568a4884b9918e08_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
61133c9a08d9ea06568a4884b9918e08_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
61133c9a08d9ea06568a4884b9918e08_JaffaCakes118
-
Size
18KB
-
MD5
61133c9a08d9ea06568a4884b9918e08
-
SHA1
7002f32677b5427e59a479b938a3b513356997b4
-
SHA256
5e67ab4092b4c50014f0c656b6920972a03847f730b37bdf0db93de45a84f0b6
-
SHA512
e87062053a668d88df1b91b59f8bb575c6d14f089894f853c3d8eb2541ea423b484a7f0b0ea6485012ec30606e7276e03c3e1a00c2a946ccc56539a072612a2a
-
SSDEEP
384:1sseki2lSQnL22Kc1w4rvojKpr6D8jjvjj2/T00000000000000000000000000u:1sseJ2NL2Bjb0000000000000000000v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61133c9a08d9ea06568a4884b9918e08_JaffaCakes118
Files
-
61133c9a08d9ea06568a4884b9918e08_JaffaCakes118.exe windows:4 windows x86 arch:x86
84c215a1a08da6976674d8de1551554b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExA
HeapCreate
InterlockedExchange
GetModuleHandleA
lstrlenA
SuspendThread
CloseHandle
WaitForSingleObject
GetAtomNameA
GetConsoleCP
GetStdHandle
GetVersion
HeapReAlloc
WaitForMultipleObjects
GlobalUnlock
SetConsoleCP
GetSystemDefaultLangID
GetCommandLineA
GetTickCount
VirtualProtect
CompareFileTime
user32
DialogBoxParamA
CreateMenu
GetKeyboardLayout
DrawCaption
DispatchMessageA
GetCursorInfo
InsertMenuA
FillRect
InvertRect
CreateIcon
FindWindowA
IsDialogMessage
GetDlgItem
DestroyMenu
SetPropA
SetScrollInfo
EnableScrollBar
SetWindowPos
GetKeyState
DragObject
advapi32
RegCloseKey
RegEnumValueA
RegCreateKeyExA
RegQueryInfoKeyA
RegEnumKeyA
apphelp
ApphelpCheckExe
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ