Static task
static1
Behavioral task
behavioral1
Sample
660a31cc57225291f466429379c1b791_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
660a31cc57225291f466429379c1b791_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
660a31cc57225291f466429379c1b791_JaffaCakes118
-
Size
26KB
-
MD5
660a31cc57225291f466429379c1b791
-
SHA1
6c1734d2e7619bd672bac1a402f40fa364327645
-
SHA256
71a7aa4cf93013f4ecc8dcc88df0ce4603e5075c11d196b79c6070be7ef20d59
-
SHA512
9a85a4327006b5b5ad07525024e88d45beb6c78da84e651b501686cb8cad047a9e29e08d5f3a861a80a22776745158a4d8de237e4ab893ce0543057aec641e09
-
SSDEEP
384:5rbqpAJw3LfpO4rRB2qePTuUSSYyTxXTT9b8or+EO0yCF1Q1Tb7C4kR:5qh3rRB2qaZJPTpSorTO0yAbR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 660a31cc57225291f466429379c1b791_JaffaCakes118
Files
-
660a31cc57225291f466429379c1b791_JaffaCakes118.exe windows:4 windows x86 arch:x86
813690d7728b8910b7d194a1663cbf09
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
QueryPerformanceFrequency
lstrcatA
VirtualAlloc
lstrlenA
lstrcmpiA
LoadLibraryW
MultiByteToWideChar
GetTickCount
lstrcpyn
GetModuleHandleW
lstrcpy
VirtualProtect
lstrcmpiW
GetCommandLineW
lstrcmpA
lstrcat
GetACP
GetModuleHandleA
GetCurrentProcess
lstrcmpW
LocalFree
LoadLibraryA
QueryPerformanceCounter
SetEvent
GetModuleFileNameA
user32
CharUpperA
GetCapture
LoadMenuW
UpdateWindow
LoadMenuA
GetMessageW
RegisterWindowMessageW
LoadStringA
LoadCursorA
RegisterClassExW
GetWindowTextLengthW
CheckRadioButton
LoadIconA
ChangeMenuW
GetDC
PostMessageW
DestroyWindow
ShowWindow
GetDlgItem
ReleaseDC
GetMenu
CheckMenuItem
LoadImageW
RegisterClassExA
GetActiveWindow
SetTimer
GetWindowTextLengthA
DefWindowProcW
GetParent
GetForegroundWindow
DefWindowProcA
CharUpperW
LoadStringW
LoadIconW
GetSystemMetrics
gdi32
GetTextColor
GetStringBitmapW
ExtTextOutW
advapi32
RegCloseKey
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1004B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ