Static task
static1
Behavioral task
behavioral1
Sample
63ec17310d5b82baf60077ef55773109_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
63ec17310d5b82baf60077ef55773109_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
63ec17310d5b82baf60077ef55773109_JaffaCakes118
-
Size
10KB
-
MD5
63ec17310d5b82baf60077ef55773109
-
SHA1
e491435979d561a51290512786c169feeecb26c7
-
SHA256
8442a979e3dcb9c62c5e09a29bc1eec205d71de053b98f0d69f2ebc7a437159f
-
SHA512
5c3cb3ff9abfe0161edfda494c55b8a85ca9f9336d705befd92ad0d7da3b086224de71134a723ee2cc5fef72c0c07546ac5bf9fade95486ca9a6a412c7ad7a72
-
SSDEEP
192:FAUjpBu41whzhBkIL3hUjWCOW5oteWHubitmdKoFc7J3:6UlBu2whzh6c6yrr4Whtmi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63ec17310d5b82baf60077ef55773109_JaffaCakes118
Files
-
63ec17310d5b82baf60077ef55773109_JaffaCakes118.exe windows:4 windows x86 arch:x86
0fcd52d56d934a34006d40cd87e54626
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsDebuggerPresent
IsProcessorFeaturePresent
SystemTimeToFileTime
GetEnvironmentVariableW
DuplicateHandle
VirtualFree
VirtualProtect
HeapAlloc
CreateFileA
UnmapViewOfFile
EnumSystemLocalesA
GetStartupInfoA
HeapReAlloc
GetCurrentProcessId
InterlockedExchange
CreateFileW
SetEvent
lstrcmpA
lstrcpyW
HeapSize
GetProcAddress
GlobalLock
GetOEMCP
ExitProcess
GetCurrentProcess
SetUnhandledExceptionFilter
Sleep
GetACP
DeleteFileA
GetComputerNameW
GetModuleHandleA
GetLocaleInfoA
GetVersion
SetConsoleCP
SetStdHandle
LockResource
MulDiv
GetCommandLineW
IsBadWritePtr
user32
MapWindowPoints
GetWindowLongW
GetWindowTextW
IntersectRect
GetParent
GetCursorPos
CreateWindowExW
PostMessageW
SetWindowTextW
DestroyIcon
msvcrt
malloc
memcpy
??2@YAPAXI@Z
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE