Static task
static1
Behavioral task
behavioral1
Sample
71e743a939da4a8b4a4927de3e0f560c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
71e743a939da4a8b4a4927de3e0f560c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
71e743a939da4a8b4a4927de3e0f560c_JaffaCakes118
-
Size
352KB
-
MD5
71e743a939da4a8b4a4927de3e0f560c
-
SHA1
2e086aa8f3f8869ce862cd7c668233eb7e15d46f
-
SHA256
9d4f4ebb61f06e493c482134c8df0826eb71fc6de08c0535ac49146e2b296e65
-
SHA512
8f6257a04dc7e62b523c728f8cee220f70e24117f452c9708c6562cd6d19eb47b4b8d971f8fb86403426cf395320fae58de26588599e673eea6b156eb9194aa3
-
SSDEEP
6144:dtYqWASxQ0rShyGlReFjbjfhyqQMRYNYoDvohAi3lFe7dk:ZWDQcShyGloFjbTA1KmNo/VFidk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71e743a939da4a8b4a4927de3e0f560c_JaffaCakes118
Files
-
71e743a939da4a8b4a4927de3e0f560c_JaffaCakes118.exe windows:4 windows x86 arch:x86
3add100543be3d6f0975efdab925a926
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalUnlock
GetSystemTime
IsBadReadPtr
ResumeThread
CreateEventA
FreeConsole
FreeEnvironmentStringsA
GlobalLock
OpenSemaphoreA
CloseHandle
VirtualProtectEx
FindClose
OpenMutexA
LoadLibraryExA
GetModuleHandleA
GetStdHandle
lstrlenA
GetACP
LocalFree
GetLastError
user32
IsIconic
IsMenu
ClipCursor
SetFocus
GetMessageA
GetDlgItemTextA
DialogBoxParamA
CreateWindowExA
GetSubMenu
EndDialog
GetMessageA
GetComboBoxInfo
LoadCursorA
MessageBoxA
msasn1
ASN1BERDecBool
ASN1BERDecCheck
ASN1BEREncOpenType
ASN1BEREncNull
ASN1DecAlloc
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ