Static task
static1
Behavioral task
behavioral1
Sample
724efcd7cb052becf5994bc8877617e8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
724efcd7cb052becf5994bc8877617e8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
724efcd7cb052becf5994bc8877617e8_JaffaCakes118
-
Size
325KB
-
MD5
724efcd7cb052becf5994bc8877617e8
-
SHA1
9d54b65b8f2f59d0f20cbf1a23ec6f116a4f054f
-
SHA256
45e22d85f0daeaaa4bdc184d7248c02d6bcd4258dba678615e768478fd95ea39
-
SHA512
1f531c3acd2f44fe248cac1724653b1b0428a6812853478b17c92800623f1cc952e369648d545c4b055501b2b1c94325b026ab5853f99bab47375d44838d759b
-
SSDEEP
6144:eHRO4Kc8UsQzWFRZvJh/7Z+WTR787SpEU2paklJbxt2G9PGhFY9sMSkmC:mhKFCzWFvXTR78742pasb7l9PGouMj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 724efcd7cb052becf5994bc8877617e8_JaffaCakes118
Files
-
724efcd7cb052becf5994bc8877617e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
fab84f26b97212aa4cf6d33ad6f3023b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTimeFormatA
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
CreateThread
Sleep
GetStartupInfoA
user32
GetWindowRect
LoadImageA
ReleaseDC
GetDCEx
SetTimer
WaitMessage
DispatchMessageA
TranslateMessage
PeekMessageA
ShowWindow
SetFocus
UpdateWindow
CreateWindowExA
GetSystemMetrics
EndDialog
DefWindowProcA
DestroyWindow
MessageBeep
DialogBoxParamA
PostQuitMessage
LoadIconA
LoadCursorA
RegisterClassA
gdi32
CreateCompatibleBitmap
CreateRectRgnIndirect
DeleteObject
GetStockObject
GetObjectA
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
atoi
memmove
memset
getenv
memcpy
??2@YAPAXI@Z
_except_handler3
sprintf
strlen
rand
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 313KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ