Static task
static1
Behavioral task
behavioral1
Sample
65031d307b77b854d869ee7629b8039b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
65031d307b77b854d869ee7629b8039b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
65031d307b77b854d869ee7629b8039b_JaffaCakes118
-
Size
342KB
-
MD5
65031d307b77b854d869ee7629b8039b
-
SHA1
712fdaf632ac0f3e76691f988a10f68af604498b
-
SHA256
5f0117e90bc86d4a587c3151ac5f3b002ed57430b7e73a8a0714ca63251cebfe
-
SHA512
113ed22bb404f06484d5ed87d68fb4340ff1126673876acfa3ede00a77d0a69ddf606e0e44cc16f1c9170f1f602cb52efa228629c8da77366c14b365415e6bce
-
SSDEEP
6144:rQtE2S9Beu7vLKU5m0+iiZHJoa5qT0Ag6oFFRBGnGCRxX6mzdg:r0yBe2Y0+iiZpJNANCFRBGGcl6Mdg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65031d307b77b854d869ee7629b8039b_JaffaCakes118
Files
-
65031d307b77b854d869ee7629b8039b_JaffaCakes118.exe windows:4 windows x86 arch:x86
6ae93839e3e561dbd135f53459b222fb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalUnlock
CreateFileMappingA
IsBadReadPtr
IsDebuggerPresent
CreateEventA
GetConsoleCP
FreeEnvironmentStringsA
GlobalLock
GetPrivateProfileIntA
CloseHandle
HeapCreate
FindClose
CreateFileA
LoadLibraryExA
GetModuleHandleA
GetStdHandle
lstrlenA
GetACP
LocalFree
GetLastError
user32
GetDC
IsWindow
GetIconInfo
SetFocus
GetDlgItem
GetDlgItemTextA
DialogBoxParamA
DispatchMessageA
GetListBoxInfo
EndDialog
GetMessageA
RedrawWindow
CheckMenuItem
DrawIconEx
uxtheme
CloseThemeData
DrawThemeIcon
GetThemeColor
EnableTheming
GetThemeMetric
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ