Static task
static1
Behavioral task
behavioral1
Sample
612eb700a8e2f864e202978a275c350c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
612eb700a8e2f864e202978a275c350c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
612eb700a8e2f864e202978a275c350c_JaffaCakes118
-
Size
207KB
-
MD5
612eb700a8e2f864e202978a275c350c
-
SHA1
b18439b9efd1f225d971672f833be5da664443e9
-
SHA256
0b20fef56abd8adcdc33d504347248ed545ff701c97b79789236a14e1f5257e4
-
SHA512
353eb4f473f2765de35cfdf1d9d72ca5ba8509dfa61c1f15d2e9ff9da000302c8743d6946a45a5a1345c5f7f042367c71dc38157087e8fb093eb81d867c73d38
-
SSDEEP
3072:0Km4pwbWi6ey743eH3xE4Qyr8MHpPkBIvKdZq2NOdqEZDAdjxV:0n4pM6j7J3xnvNpPOIvau/Zs3V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 612eb700a8e2f864e202978a275c350c_JaffaCakes118
Files
-
612eb700a8e2f864e202978a275c350c_JaffaCakes118.exe windows:4 windows x86 arch:x86
1d5b7835ad46f96540d918aa3869e5ac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
WaitForSingleObject
GetConsoleCP
GetAtomNameA
HeapReAlloc
WaitForMultipleObjects
VirtualProtect
SetConsoleCP
GetModuleHandleA
lstrlenA
CloseHandle
GetTickCount
GetSystemDefaultLangID
LoadLibraryExA
CompareFileTime
SuspendThread
GetStdHandle
GetCommandLineA
HeapCreate
GlobalUnlock
InterlockedExchange
user32
GetDlgItem
SetScrollInfo
FindWindowA
DialogBoxParamA
DrawCaption
CreateIcon
GetCursorInfo
InsertMenuA
SetWindowPos
IsDialogMessage
DestroyMenu
GetKeyState
EnableScrollBar
CopyImage
FillRect
DispatchMessageA
SetPropA
InvertRect
CreateMenu
GetKeyboardLayout
DragObject
advapi32
RegEnumValueA
RegCloseKey
RegCreateKeyExA
RegEnumKeyA
RegQueryInfoKeyA
apphelp
ApphelpCheckExe
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 808KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ