Static task
static1
Behavioral task
behavioral1
Sample
71dd4dd97e1df57e090f83d337363730_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
71dd4dd97e1df57e090f83d337363730_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
71dd4dd97e1df57e090f83d337363730_JaffaCakes118
-
Size
289KB
-
MD5
71dd4dd97e1df57e090f83d337363730
-
SHA1
e78be0bb324fed79220f4a708d97d8b11d047951
-
SHA256
58a2a37587bd576f5e3694d645c089d51f5cc1cbce1e14dea61ff64b7851f170
-
SHA512
7ab00924668af02586e36b2ff29ca84d510dbb2fdb4dfad7e05646c021062363e48b977304d5a108e987c5cc9cd71211de7daf83a16e5b0ed9663356ea4e2d18
-
SSDEEP
6144:m6IQCn2cmVgI00d2fYki9XVeHuVe8GIDUVD:c5U1dnQ8GIa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71dd4dd97e1df57e090f83d337363730_JaffaCakes118
Files
-
71dd4dd97e1df57e090f83d337363730_JaffaCakes118.exe windows:4 windows x86 arch:x86
66a67f31362aa6f7d7bbb7d2bf241479
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CompareStringA
CreateEventA
CreateThread
DeleteFileA
EnterCriticalSection
ExitThread
FindClose
GetCommandLineA
GetCurrentThreadId
GetModuleFileNameA
GetProcessHeap
GetProfileStringA
GetTickCount
GlobalAlloc
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LocalUnlock
MultiByteToWideChar
SetCurrentDirectoryA
SetErrorMode
SetEvent
SetLastError
Sleep
WaitForSingleObject
WriteConsoleA
lstrcatA
lstrcmpiA
lstrlenA
user32
BeginPaint
EqualRect
GetDlgItem
GetSysColor
InsertMenuItemW
InvalidateRect
IsRectEmpty
IsWindowEnabled
LoadStringW
MessageBeep
SetCapture
TranslateMessage
UnionRect
WindowFromPoint
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 274KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ