Static task
static1
Behavioral task
behavioral1
Sample
68a300123a9ae4fd9cd56f36c0b70d9f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
68a300123a9ae4fd9cd56f36c0b70d9f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
68a300123a9ae4fd9cd56f36c0b70d9f_JaffaCakes118
-
Size
290KB
-
MD5
68a300123a9ae4fd9cd56f36c0b70d9f
-
SHA1
34b0017ef9c6e40d739fdbaaef731b06991d47e9
-
SHA256
acc72d482a58368bea7206730d92ee5178ecbd28db672079b29f692748bce41e
-
SHA512
d91918b27ba15c97aceb55bc139ceb911a94be7affc759cd62179746ddda4d291864163cb63aef40e7f0bcfb8cbf596c1fa7c743cdf28077f9328ff3acd4c787
-
SSDEEP
6144:fJMnmeRs8861DRiwUOw8T+E3tR0mMcyTBoCid:RMnDJ86VH/0dBTBEd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68a300123a9ae4fd9cd56f36c0b70d9f_JaffaCakes118
Files
-
68a300123a9ae4fd9cd56f36c0b70d9f_JaffaCakes118.exe windows:4 windows x86 arch:x86
2731b0967579d59f191e887b8317e221
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateEventA
CreateFileMappingA
CreateThread
EnterCriticalSection
ExitThread
FindNextFileA
GetModuleHandleA
GetPrivateProfileStringA
GetTickCount
GlobalAlloc
InitializeCriticalSection
InterlockedExchange
IsBadCodePtr
LeaveCriticalSection
LoadLibraryA
LocalLock
LocalUnlock
SetEvent
Sleep
TerminateThread
UnmapViewOfFile
WaitForSingleObject
WriteConsoleA
WriteFile
lstrcpynA
lstrlenA
user32
AdjustWindowRectEx
CharNextW
DestroyIcon
EnableMenuItem
GetShellWindow
InsertMenuItemW
MessageBoxW
SetScrollInfo
SetWindowPlacement
TrackPopupMenu
WaitMessage
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 275KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ