Static task
static1
Behavioral task
behavioral1
Sample
69ba453393a706ff50dc67bbb2100bb8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
69ba453393a706ff50dc67bbb2100bb8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
69ba453393a706ff50dc67bbb2100bb8_JaffaCakes118
-
Size
31KB
-
MD5
69ba453393a706ff50dc67bbb2100bb8
-
SHA1
704b183c716be619f75cf87e1aac6551cda8c6ef
-
SHA256
2d62215c80df156407640aa6c421d06ef2f531e5b699aef60a4bad7f4452ffaf
-
SHA512
ff11367e301a1e7d2ab1fa7cad55a4cf74a6e26a5168145fc975dadc9d7f2cffcb80b65e2cc640d888049670ef6357bbf1232804b47b47602e3bf003134f49f3
-
SSDEEP
768:ByyyyyyyyyyyyyyyyzfzS7tpalnpUYbRmEXTHJYdQId1v:x2clpUVEO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69ba453393a706ff50dc67bbb2100bb8_JaffaCakes118
Files
-
69ba453393a706ff50dc67bbb2100bb8_JaffaCakes118.exe windows:52358 windows x86 arch:x86
c89085a76f8f89f428f78411a1c496fd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
DeleteCriticalSection
lstrcpyW
SetUnhandledExceptionFilter
SetEvent
VirtualAlloc
VirtualAlloc
VirtualAlloc
LeaveCriticalSection
ReadFile
InterlockedDecrement
GetProcessHeap
GetCommandLineA
GetProcAddress
SetFilePointer
GetProcAddress
HeapFree
FreeLibrary
HeapFree
LoadLibraryW
QueryPerformanceCounter
HeapReAlloc
SetEvent
GetCurrentProcessId
GetCommandLineA
GetProcAddress
CreateThread
HeapDestroy
LocalAlloc
GetModuleHandleW
HeapAlloc
FreeLibrary
LoadLibraryA
GetSystemTimeAsFileTime
Sleep
lstrcpyW
LocalFree
HeapReAlloc
lstrlenW
GetModuleHandleW
DeleteCriticalSection
user32
PtInRect
ShowWindow
GetWindow
FillRect
RegisterClassExW
GetClientRect
SetTimer
CopyRect
MessageBeep
GetCursorPos
GetDesktopWindow
LoadIconW
GetCursorPos
LoadIconW
IsIconic
DrawTextW
PostQuitMessage
DefWindowProcW
CopyRect
SetWindowPos
MapWindowPoints
GetDesktopWindow
MessageBeep
SetDlgItemTextW
InvalidateRect
FindWindowW
GetWindowLongW
MessageBoxW
LoadStringA
MoveWindow
SendMessageW
SetCursor
CheckDlgButton
FindWindowW
ScreenToClient
BeginPaint
SetForegroundWindow
GetDesktopWindow
SetCursor
GetDlgItemTextW
IsIconic
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ