Static task
static1
Behavioral task
behavioral1
Sample
7495ea90f605ece9ce4ebed2d0821a59_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7495ea90f605ece9ce4ebed2d0821a59_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7495ea90f605ece9ce4ebed2d0821a59_JaffaCakes118
-
Size
317KB
-
MD5
7495ea90f605ece9ce4ebed2d0821a59
-
SHA1
de727426c787b8311fdf464160f5199b4dd2cda4
-
SHA256
b18df719cd2c11d426dffd3a9390b3a96310415473e55f3598faa132c01f31d3
-
SHA512
0fb8f6daefdf59acfcb3dd4054d6e3a41c4216535eaac85fc3fc1298c5d529135df3e1e4b75144600c2ee4dca030b0317d64b5f188022b1493b78e2926777bdc
-
SSDEEP
6144:OwBBeC/4nXA13lwjbjHMGcnr6hDLCF1bzzFD5BrOSMInBOwUsD1N:Ow0nX5Hrlcnr6hDLstzzYSMaBOwUsRN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7495ea90f605ece9ce4ebed2d0821a59_JaffaCakes118
Files
-
7495ea90f605ece9ce4ebed2d0821a59_JaffaCakes118.exe windows:4 windows x86 arch:x86
21fed8f3933c65afbb35f01e84039e74
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
RaiseException
GetOEMCP
VirtualProtect
GetLastError
FreeConsole
LoadLibraryExA
DeleteAtom
EnterCriticalSection
GlobalFree
LoadResource
WriteProfileStringA
SetConsolePalette
LocalFree
GlobalAddAtomA
GetStdHandle
GlobalUnlock
HeapCreate
GlobalAddAtomA
IsBadCodePtr
lstrcat
user32
GetClassNameA
BeginPaint
ReleaseDC
AlignRects
ShowWindow
GetFocus
GetDC
GetForegroundWindow
GetParent
EndPaint
GetWindow
DrawEdge
IsIconic
GetWindowTextLengthA
GetActiveWindow
GetWindowTextA
GetClassInfoExA
ValidateRect
CloseWindow
mprapi
MprAdminUserRead
MprAdminUserClose
MprAdminUserWrite
MprAdminUserOpen
MprAdminUserGetInfo
linkinfo
CreateLinkInfoA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ