Static task
static1
Behavioral task
behavioral1
Sample
6244e7337e401390696d0e86a0015fe9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6244e7337e401390696d0e86a0015fe9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6244e7337e401390696d0e86a0015fe9_JaffaCakes118
-
Size
19KB
-
MD5
6244e7337e401390696d0e86a0015fe9
-
SHA1
028b35bee0df732741b9cc6ac3b646eaded7dd37
-
SHA256
6da3e373f3585a07f6603a9eb28d3127218587736b4c0a80e561a7043e6c11b6
-
SHA512
9e4b9b4999e9642a8486a1e1db459668620655d337d3f207fff73ed9b22f19b76f764518c77f4c9366071c4025b6b5afc2e78223910dda0d46222cd9c4a89854
-
SSDEEP
384:JcDwW6wpAe+7n0c1w4rvojKpr6D8jjvjj2fevJU:JcDwW6UAmjfO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6244e7337e401390696d0e86a0015fe9_JaffaCakes118
Files
-
6244e7337e401390696d0e86a0015fe9_JaffaCakes118.exe windows:4 windows x86 arch:x86
940a38f4d31e06d46dc6d7f70fdca441
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
lstrcatA
GetModuleHandleA
GetNumberOfConsoleMouseButtons
GetOEMCP
EnumCalendarInfoA
GetThreadLocale
TlsFree
ResetEvent
GetProcessVersion
GetExitCodeThread
GetProcessTimes
TlsGetValue
GetConsoleInputWaitHandle
PulseEvent
lstrcpyA
OutputDebugStringA
AreFileApisANSI
GetUserDefaultLangID
GetConsoleCP
IsDBCSLeadByte
user32
GetSystemMetrics
IsWindowVisible
CloseWindow
GetClassNameA
GetFocus
GetWindowTextA
RegisterClassA
GetActiveWindow
ShowWindow
IsIconic
GetForegroundWindow
GetWindow
ReleaseDC
GetDC
GetWindowTextLengthA
ValidateRect
ReleaseDC
InvalidateRect
GetClassInfoExA
tapi32
MMCShutdown
MMCSetServerConfig
MMCInitialize
MMCSetLineInfo
MMCSetPhoneInfo
mlang
DllGetClassObject
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ