Static task
static1
Behavioral task
behavioral1
Sample
69240ba16c11ce51a3694c6708bb3d2f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
69240ba16c11ce51a3694c6708bb3d2f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
69240ba16c11ce51a3694c6708bb3d2f_JaffaCakes118
-
Size
17KB
-
MD5
69240ba16c11ce51a3694c6708bb3d2f
-
SHA1
973c3d713c44db76225511176180b96e5b51d60b
-
SHA256
9d83959c4fd4f3d997afedb0370759b0427cbfdfc62c56a45f3be3596cb68d6f
-
SHA512
7b9fe4ac6073334d41eaaeb02aee0497feac5248aed003c18c07e22f50645cc080710206f3785b2061fe244174fa40ca667312c42c4b7f5caa45bc4b3192b350
-
SSDEEP
192:6Xz1QEDCP793Ln9ip+XQQgN1jr3zlaa+ZnmKhKqJAhZ/z9J5RnARN:4zCEuT/ip0gNVrInm+CZ/z9J5Rny
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69240ba16c11ce51a3694c6708bb3d2f_JaffaCakes118
Files
-
69240ba16c11ce51a3694c6708bb3d2f_JaffaCakes118.exe windows:4 windows x86 arch:x86
a9f26b6b2584316e62e23c85d2e172e8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForMultipleObjects
HeapCreate
LocalSize
GetConsoleCP
lstrlenA
GlobalUnlock
GetModuleHandleA
CompareFileTime
SuspendThread
GetAtomNameA
GetStdHandle
VirtualProtect
GetVersion
CloseHandle
HeapReAlloc
InterlockedExchange
GetTickCount
GetCommandLineA
GetSystemDefaultLangID
LoadLibraryExA
WaitForSingleObject
gdi32
FloodFill
CreateFontA
EngLineTo
Ellipse
GetMetaFileA
DeleteDC
GetMetaRgn
EndPath
GetTextColor
CreatePalette
GetStringBitmapA
CreateICA
Escape
EqualRgn
GetFontData
DeleteObject
BeginPath
GetRgnBox
AbortPath
winmm
auxGetVolume
OpenDriver
CloseDriver
auxSetVolume
PlaySoundA
secur32
AddCredentialsA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ