Static task
static1
Behavioral task
behavioral1
Sample
7333bdfc713ac7d308a05335b2010f18_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7333bdfc713ac7d308a05335b2010f18_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7333bdfc713ac7d308a05335b2010f18_JaffaCakes118
-
Size
370KB
-
MD5
7333bdfc713ac7d308a05335b2010f18
-
SHA1
b79d55d1888661f134f3a558849647ee80394043
-
SHA256
36e9ed96ca29ab68c02fac965423bc8bb7661e2987b18124c04c0e844d393fff
-
SHA512
c6d938ccd31066e796aaab97b470eed67c5c090152c10dc70c44a8155f0b7b28d25bccafaea148d01d2d4baf85630cc0d9309a0b96b35e6addda794d4e17dd44
-
SSDEEP
6144:vYuDeBKecBsNEgXtYtaTexGGRA+VSQl0WgaBmh2Rmg1KBqcAK38:bDe0zsNEgXtrOGcA+YQl05EX1KBRAK3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7333bdfc713ac7d308a05335b2010f18_JaffaCakes118
Files
-
7333bdfc713ac7d308a05335b2010f18_JaffaCakes118.exe windows:4 windows x86 arch:x86
3fff87e6d740b36ea202a6a43ff28b5d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GlobalUnlock
DeleteAtom
LoadLibraryExW
CreateMutexA
GetExitCodeProcess
CreateFileA
GetPriorityClass
ReleaseMutex
FindResourceA
SetLastError
CloseHandle
HeapCreate
GlobalFree
SetEnvironmentVariableA
lstrlenW
VirtualQuery
TlsGetValue
GetModuleHandleA
GetStdHandle
user32
FillRect
DrawMenuBar
CreateWindowExA
GetDC
SetFocus
GetIconInfo
DrawEdge
IsWindow
DispatchMessageA
GetDlgItem
CreateMenu
CheckRadioButton
CallWindowProcA
ntshrui
GetLocalPathFromNetResourceA
GetNetResourceFromLocalPathA
IsPathSharedW
IsPathSharedA
SetFolderPermissionsForSharing
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 343KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ