Static task
static1
Behavioral task
behavioral1
Sample
701e797a7b3ec2e5e1f36191d2c62f7b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
701e797a7b3ec2e5e1f36191d2c62f7b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
701e797a7b3ec2e5e1f36191d2c62f7b_JaffaCakes118
-
Size
21KB
-
MD5
701e797a7b3ec2e5e1f36191d2c62f7b
-
SHA1
3f9b88442a0e8057ec48d44db4453fa5e84458c2
-
SHA256
18b93d8810a924c7bfba64cfdcde06a14299fd35b0496e70a7a8dfb4c18864fb
-
SHA512
94eae1882d7014ce201a2a500b2b377d34e4cf9ad387d5ffac85ca68729a58ba5511384e6e45131bc984e101fb12af01cbfb32c464f27e534d07849e0d6cd917
-
SSDEEP
384:46zZtAlvy+wmbM9kkD7Wyh7zh08g8YH3Me3Mg12l9gb:4nvTwmg9ky717l0tNH3N3sa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 701e797a7b3ec2e5e1f36191d2c62f7b_JaffaCakes118
Files
-
701e797a7b3ec2e5e1f36191d2c62f7b_JaffaCakes118.exe windows:42149 windows x86 arch:x86
97c9e4877bcf312270654a38e1cc2f86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
GetStartupInfoW
ReadFile
GetCurrentProcess
ExitProcess
LocalFree
Sleep
GetLastError
DeleteCriticalSection
LocalFree
GetProcessHeap
GetACP
GetLastError
Sleep
WaitForSingleObject
HeapReAlloc
GetCurrentProcess
WideCharToMultiByte
GetStartupInfoA
CreateFileW
GetACP
VirtualAlloc
GetCurrentProcessId
GetCurrentProcessId
ExitProcess
GetCommandLineW
SetUnhandledExceptionFilter
GetCommandLineW
HeapDestroy
GetModuleHandleA
EnterCriticalSection
InitializeCriticalSection
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcessId
lstrcpyW
lstrlenW
SetEvent
WriteFile
HeapFree
user32
IsIconic
SendMessageA
wsprintfA
ReleaseCapture
SetDlgItemTextW
SendMessageW
GetDlgItemTextW
SetForegroundWindow
wsprintfW
TranslateMessage
OffsetRect
SetWindowTextW
GetWindowRect
MoveWindow
DialogBoxParamW
LoadAcceleratorsW
GetDlgItem
KillTimer
GetDlgItemTextW
DispatchMessageW
GetMenu
GetKeyState
DrawTextW
CopyRect
GetWindow
ReleaseCapture
MessageBoxA
CheckDlgButton
DispatchMessageA
FillRect
LoadStringA
RegisterClassExW
GetSystemMetrics
FillRect
SetWindowPos
MoveWindow
ReleaseDC
GetWindowTextW
ReleaseDC
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ