Static task
static1
Behavioral task
behavioral1
Sample
684485430274536175540768660f24f5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
684485430274536175540768660f24f5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
684485430274536175540768660f24f5_JaffaCakes118
-
Size
84KB
-
MD5
684485430274536175540768660f24f5
-
SHA1
e4ad01650e08be829dd68992623c8941cd027ac0
-
SHA256
49657deed028542d89b1b8b656c8795f508a486a66213084a623752cc2b56399
-
SHA512
76dc0367a919e3f6c146aa1f286f33e19bcb0d50c3267afb866c945b8ddce661f77baed51a6c52144932676f34e2c13174ec596be329700f323351ec7312c076
-
SSDEEP
1536:5oJR/+kmw+R6lDYh4w/6cJMHsXR4vbchGgEh4pTSN:6jTmw+R6ESV4hGgRpI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 684485430274536175540768660f24f5_JaffaCakes118
Files
-
684485430274536175540768660f24f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
f1f2e053afbfe83013973f8b22066f36
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
ReplaceTextA
ChooseFontW
user32
DrawIconEx
kernel32
HeapReAlloc
SystemTimeToFileTime
SetThreadAffinityMask
SetFileApisToANSI
SetDefaultCommConfigA
BeginUpdateResourceA
CloseHandle
EnumSystemLanguageGroupsA
ExitProcess
GetACP
GetAtomNameW
GetCommandLineA
GetEnvironmentStringsA
GetModuleHandleA
GetStartupInfoA
GetThreadPriorityBoost
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapCreate
MapUserPhysicalPages
ole32
CoCreateInstance
CLSIDFromString
StringFromGUID2
dbghelp
vc7fpo
SymSetSearchPath
SymSetContext
SymGetModuleBase
SymGetLineFromName
ImagehlpApiVersion
ImageRvaToSection
FindFileInSearchPath
FindFileInPath
DbgHelpCreateUserDumpW
comctl32
UninitializeFlatSB
FlatSB_ShowScrollBar
FlatSB_SetScrollRange
InitializeFlatSB
ImageList_SetFlags
ImageList_ReplaceIcon
GetMUILanguage
ImageList_LoadImageA
ImageList_GetIcon
ImageList_GetBkColor
ImageList_DrawIndirect
ImageList_DrawEx
ImageList_DragMove
ImageList_Add
FlatSB_GetScrollPos
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ