Static task
static1
Behavioral task
behavioral1
Sample
6f95caa95ebfc12ded5e7ff1a3636a7c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6f95caa95ebfc12ded5e7ff1a3636a7c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6f95caa95ebfc12ded5e7ff1a3636a7c_JaffaCakes118
-
Size
99KB
-
MD5
6f95caa95ebfc12ded5e7ff1a3636a7c
-
SHA1
dae62dc2ab1ca2f12448db3a245ef9deb267451d
-
SHA256
40675b81e7c8cbd704a35170317bb584788423b111d88474bacbd63eddbfa69b
-
SHA512
378f858e01aa82ea2c82486dc7074bd08255264959dbe230625d5fc1981aa2caf15ce1d1dbd37fdc21365abdbfaa99f6f38a79e90777765342ad6b9cbb0cb747
-
SSDEEP
3072:y6rslPbJumKaOOhP6y4Wb3OkBf4ey0SNqhlhl1YyU:TIJuraOoP34WSkBAey0SNqZl1Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f95caa95ebfc12ded5e7ff1a3636a7c_JaffaCakes118
Files
-
6f95caa95ebfc12ded5e7ff1a3636a7c_JaffaCakes118.exe windows:4 windows x86 arch:x86
5777a21d855c053b7f8a157f2bfe1985
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
LocalLock
lstrcpyA
SetWaitableTimer
HeapUnlock
InitializeCriticalSection
SetCriticalSectionSpinCount
CreateMutexW
TryEnterCriticalSection
GetEnvironmentVariableW
HeapSize
FormatMessageW
GetLocaleInfoA
HeapFree
InitializeCriticalSectionAndSpinCount
user32
UnregisterClassA
GetDlgItem
LoadStringA
DrawFrame
DrawTextA
RegisterClassA
SetLastErrorEx
wvsprintfA
ToUnicode
DrawFocusRect
CopyIcon
AlignRects
gdi32
CreateDiscardableBitmap
AnimatePalette
SetDCPenColor
GdiReleaseDC
CreateDCW
EngMultiByteToUnicodeN
RoundRect
GetObjectA
GetTextColor
Polygon
SetTextColor
GdiConvertRegion
FlattenPath
GetTextFaceA
Sections
CODE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 1011B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 50B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ