Static task
static1
Behavioral task
behavioral1
Sample
62123b767205962eb8c9731d401ae8cd_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
62123b767205962eb8c9731d401ae8cd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
62123b767205962eb8c9731d401ae8cd_JaffaCakes118
-
Size
275KB
-
MD5
62123b767205962eb8c9731d401ae8cd
-
SHA1
700a15bf3141fab7c2b8bb7123e2cb630049a2fb
-
SHA256
c5780b80e0756de3093e374822d6831dc6f0751ce1c3fea89577f3cb23ce6c64
-
SHA512
6817655fd131e9a8fd69fa4447a9cd753f3be341502955dd61ca6d669c386102129ba2e80a24230c6368c05279a0f4ec4254f6fb2440f35722c71f032bd56a94
-
SSDEEP
6144:zMm9r2ClOgBCF2EV40H6qB5ug43VwdZlFStdc2nNaxH:zMgmgK2l0LgwCtdcJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62123b767205962eb8c9731d401ae8cd_JaffaCakes118
Files
-
62123b767205962eb8c9731d401ae8cd_JaffaCakes118.exe windows:4 windows x86 arch:x86
4470cb2277569317f59811fa53e3c284
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateEventA
CreateIoCompletionPort
CreateThread
DeleteFileA
EnterCriticalSection
ExitThread
FormatMessageA
GetFileSize
GetTickCount
GlobalAlloc
InitializeCriticalSection
IsBadCodePtr
LeaveCriticalSection
LoadLibraryA
LocalReAlloc
MapViewOfFile
MoveFileW
MulDiv
RaiseException
SetEvent
Sleep
WaitForSingleObject
WriteConsoleA
lstrcmpiA
lstrcpyA
lstrlenA
user32
BeginPaint
FindWindowA
GetClientRect
GetKeyState
GetSystemMetrics
IsDlgButtonChecked
IsRectEmpty
PtInRect
RedrawWindow
RemoveMenu
RemovePropW
SendMessageW
SetMenuItemInfoW
SetWindowPlacement
SetWindowTextW
TranslateAcceleratorW
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 260KB - Virtual size: 262KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ