Static task
static1
Behavioral task
behavioral1
Sample
640b2b98361300f56579de075b964e6f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
640b2b98361300f56579de075b964e6f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
640b2b98361300f56579de075b964e6f_JaffaCakes118
-
Size
413KB
-
MD5
640b2b98361300f56579de075b964e6f
-
SHA1
23c0e1c58c24fe2f4cd00ce1ff67af96cebdfaae
-
SHA256
7ac67a0f318fea55bbf80023150d654980e7e977b72d5f15514580239fb1cfc5
-
SHA512
796b0ef8095d2b3e1435f96f80bf2dd6dcc4e1961ec0b5de81ef6666d07d536df4d5a6fe19acfba4e943aab0844ee074bf93596040006b975e95dd7710daaca3
-
SSDEEP
6144:UIcTRLFhpIY/houf4qLAdlwzsT8pdUNhcxckiWZe6YB3W2viZsSQ:UplxhikhoS4qL6iwTayNhcwaSBGZmS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 640b2b98361300f56579de075b964e6f_JaffaCakes118
Files
-
640b2b98361300f56579de075b964e6f_JaffaCakes118.exe windows:4 windows x86 arch:x86
8d082cdd6d8dcb58e79079624bedfa85
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommState
GetStdHandle
CreateHardLinkA
ExitProcess
GetTapeStatus
ClearCommBreak
GetModuleHandleA
FindAtomA
FormatMessageA
GlobalFlags
CloseHandle
GlobalFree
EnterCriticalSection
GetOEMCP
GetUserDefaultLangID
CreateJobSet
GetVolumePathNameA
GlobalLock
VirtualAlloc
GetProcessHeap
GetProfileStringA
user32
GetParent
CloseWindow
RegisterClassA
GetWindow
EndPaint
ReleaseDC
GetFocus
GetClassNameA
GetClassInfoExA
GetForegroundWindow
IsIconic
BeginPaint
GetActiveWindow
GetWindowTextA
GetDC
ValidateRect
ShowWindow
DrawEdge
GetWindowTextLengthA
gdi32
CreateDIBitmap
CreateDCA
GetCharWidthA
GetColorSpace
ExtCreatePen
sxs
SxsLookupClrGuid
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ