Static task
static1
Behavioral task
behavioral1
Sample
7474c882d4b7f8b65a193dc0d9ab4c1c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7474c882d4b7f8b65a193dc0d9ab4c1c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7474c882d4b7f8b65a193dc0d9ab4c1c_JaffaCakes118
-
Size
101KB
-
MD5
7474c882d4b7f8b65a193dc0d9ab4c1c
-
SHA1
db1b5b9e97f95a4c20fee7a20d53d6d4fffe4eb5
-
SHA256
3139c165851d50e7e628c643247fb8fed5f9c3ad3c85fab8c7272ea618f7b2e7
-
SHA512
9ae4a287a157a666f04dfd83484fd0c07c3412d9fc64588e49a829ff9728f5bf5e269ec43917757fb79bfdc5c1bb69beef4fcd98d34e69e2a9df433f889cb20b
-
SSDEEP
3072:J6Nqp1v9jdpTp7xZ92zZ4m5Fl+/GbWxN+umCwdCc:MNqBdpTPZ92z55FWxgR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7474c882d4b7f8b65a193dc0d9ab4c1c_JaffaCakes118
Files
-
7474c882d4b7f8b65a193dc0d9ab4c1c_JaffaCakes118.exe windows:1 windows x86 arch:x86
7bdf72452c6da66d1888f66aa83b9a26
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetCurrencyFormatA
GetDiskFreeSpaceA
GetExitCodeProcess
GetFileSize
GetLastError
GetModuleHandleA
GetProcAddress
GetTickCount
IsDebuggerPresent
LoadLibraryA
SearchPathA
SuspendThread
SwitchToFiber
SwitchToThread
VirtualAlloc
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA
FindResourceW
EnumTimeFormatsW
DefineDosDeviceW
CopyFileExW
gdi32
CreateBrushIndirect
DeleteObject
EndDoc
FillPath
GetDeviceCaps
SetBkColor
SetTextColor
StartDocA
user32
CheckDlgButton
EnableMenuItem
GetCursorPos
GetDlgCtrlID
GetMenu
GetMessagePos
GetSysColor
InvalidateRect
IsCharUpperA
IsDlgButtonChecked
KillTimer
LoadAcceleratorsA
LoadCursorA
MoveWindow
SetWindowPos
SwitchDesktop
TrackMouseEvent
TrackPopupMenuEx
advapi32
EqualSid
RegCloseKey
RegEnumKeyA
RegLoadKeyA
Sections
.text Size: 512B - Virtual size: 59B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.xdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
club Size: 512B - Virtual size: 377B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.text Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 732B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ