Static task
static1
Behavioral task
behavioral1
Sample
7030aa75f05c8f2b949fe92051d82a10_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7030aa75f05c8f2b949fe92051d82a10_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7030aa75f05c8f2b949fe92051d82a10_JaffaCakes118
-
Size
161KB
-
MD5
7030aa75f05c8f2b949fe92051d82a10
-
SHA1
8b3f9d1058ce660c3a82e0b8d3580bf9c018c8ef
-
SHA256
01c2d276bf30189b7a427fcc68f24c9e45899e976791bb9edfa1922081c1b69c
-
SHA512
be475e6500e7789a4928afffd1b1a9d29da9eacdf11a82ebfa73c790e70a834c4ce3242f3712377474743a55d161c7db7b898568b1bd0d4b2754ff15a5b367c8
-
SSDEEP
3072:sFzeXf2Uq2koDpvZb22aagi+0p1/sPEIIiaraECZXwN2BQOFUoThcq:2Yq2k4pvZK2HgapgIZjKxvUQhcq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7030aa75f05c8f2b949fe92051d82a10_JaffaCakes118
Files
-
7030aa75f05c8f2b949fe92051d82a10_JaffaCakes118.exe windows:4 windows x86 arch:x86
211cf7f5044fdc7110fc4eaa9e7b735a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
GetCapture
ExcludeUpdateRgn
FlashWindow
SetCapture
IsWindow
RealGetWindowClassA
ValidateRgn
DestroyWindow
InvalidateRgn
ValidateRect
UpdateWindow
IsWindowEnabled
ReleaseCapture
EnableWindow
GetUpdateRgn
kernel32
CompareStringA
FindNextFileW
LCMapStringW
ConvertFiberToThread
SetErrorMode
FileTimeToSystemTime
LocalFree
SetEnvironmentVariableW
GetLocalTime
LocalAlloc
SetThreadIdealProcessor
GetShortPathNameW
GetCurrentProcess
LoadResource
LocalFileTimeToFileTime
EnumResourceNamesW
SetCurrentDirectoryW
IsBadReadPtr
RegisterWaitForSingleObject
GetSystemDirectoryW
GetStringTypeW
FindFirstFileW
GetOEMCP
SystemTimeToFileTime
FindResourceW
FileTimeToLocalFileTime
FindClose
FreeLibrary
SearchPathW
Sections
.text Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imul Size: 1024B - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ