Static task
static1
Behavioral task
behavioral1
Sample
738bb2226b61934ec80c5875fb0f34b8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
738bb2226b61934ec80c5875fb0f34b8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
738bb2226b61934ec80c5875fb0f34b8_JaffaCakes118
-
Size
766KB
-
MD5
738bb2226b61934ec80c5875fb0f34b8
-
SHA1
7297d145e8b159bbaa3d3eceaff96331495d3fbc
-
SHA256
d16a9e967fe1b1a87d8c378c6a3e79ae27f871370d81232d1b1cbc40208c0cf2
-
SHA512
22770ac42f978f56c24ab465960464ccbd960f2fe6a40f6677f47e2c5aec91ce3cfb5ed1b242da32910976836a9962bc898039e32218751076f2b62484b7b3ee
-
SSDEEP
12288:Z2qmS5hErmwtWU35YX+je1oksxOvab819qB6T9eRMwG6sq:Yq1hOtrYXDoksxOvab819qBO9e7G6v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 738bb2226b61934ec80c5875fb0f34b8_JaffaCakes118
Files
-
738bb2226b61934ec80c5875fb0f34b8_JaffaCakes118.exe windows:4 windows x86 arch:x86
ec83079861799c01ceeaf014fda72722
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadWritePtr
InitializeCriticalSection
FileTimeToSystemTime
UnhandledExceptionFilter
SystemTimeToFileTime
GetLastError
GetFileSize
LeaveCriticalSection
SetUnhandledExceptionFilter
EnterCriticalSection
FileTimeToLocalFileTime
GetTickCount
DeleteCriticalSection
GetSystemTimeAsFileTime
CloseHandle
GetFullPathNameA
CreateFileA
GetModuleHandleA
user32
CreateWindowExA
SetFocus
SendMessageA
PostQuitMessage
SetWindowTextA
IsWindowVisible
ShowWindow
IsWindowEnabled
UnregisterClassA
IsWindow
GetDesktopWindow
GetActiveWindow
DispatchMessageA
PostMessageA
GetDlgItem
PeekMessageA
EndDialog
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ