Static task
static1
Behavioral task
behavioral1
Sample
744f632d86aa20ea7a89f2f8357a9dd2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
744f632d86aa20ea7a89f2f8357a9dd2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
744f632d86aa20ea7a89f2f8357a9dd2_JaffaCakes118
-
Size
41KB
-
MD5
744f632d86aa20ea7a89f2f8357a9dd2
-
SHA1
ff5a044ea365d8c40cb1c0be8e0da642eaca98b7
-
SHA256
58f8c1dc28c74a0ed47f03f81b01f358848bdce6e25ff8bf64003f239ff4ef13
-
SHA512
81596606d6953b784f81b3b1a745db2165299452f7442fbcf3eaef817e9a8add128b87135e06d73cba5b60a550045c301b9e69ad7efd92fc62af1433879c22b4
-
SSDEEP
768:R4+VW2Pf74ig6CT56c8Uoe+j2dQxCn0TgQL2z1BG3:Kfe7bg6CTz8SoxCYJLgvG3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 744f632d86aa20ea7a89f2f8357a9dd2_JaffaCakes118
Files
-
744f632d86aa20ea7a89f2f8357a9dd2_JaffaCakes118.exe windows:4 windows x86 arch:x86
0456f85ad14fb3af325c15c94e2fb9b9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AreFileApisANSI
CopyFileA
CreateConsoleScreenBuffer
CreateDirectoryW
DeleteFiber
ExitProcess
GetComputerNameW
GetHandleInformation
GetLastError
GetStdHandle
Heap32ListNext
IsProcessorFeaturePresent
IsSystemResumeAutomatic
Module32First
PeekConsoleInputA
SetCommState
SetLocaleInfoW
WaitForSingleObject
WriteFile
lstrcpyW
user32
AlignRects
BroadcastSystemMessageA
CascadeChildWindows
CharNextW
DdeCreateStringHandleA
DdeGetLastError
DrawCaption
GetClipboardSequenceNumber
GetDlgItemTextA
GetInternalWindowPos
GetMenuDefaultItem
GetWindowWord
InsertMenuA
RegisterWindowMessageW
SetCapture
SetParent
SetScrollInfo
TranslateMDISysAccel
UnionRect
WINNLSGetIMEHotkey
gdi32
AngleArc
ColorMatchToTarget
CreateEllipticRgn
CreateRectRgn
DeviceCapabilitiesExA
EnumICMProfilesA
ExtTextOutW
GdiPlayJournal
GetKerningPairs
GetLayout
GetOutlineTextMetricsA
GetPixelFormat
GetTextExtentExPointA
GetWorldTransform
LineTo
OffsetWindowOrgEx
PolyBezier
PolyPolyline
RealizePalette
RemoveFontResourceW
SetMagicColors
SetPixel
SetPolyFillMode
TextOutA
UnrealizeObject
Sections
.text Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ