Static task
static1
Behavioral task
behavioral1
Sample
7496bbbfa84095c44da22a6748aece15_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7496bbbfa84095c44da22a6748aece15_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7496bbbfa84095c44da22a6748aece15_JaffaCakes118
-
Size
172KB
-
MD5
7496bbbfa84095c44da22a6748aece15
-
SHA1
638b40a70adcdddb3ac5e0895b6587c93fc6bae3
-
SHA256
439b556db6a6648fa154948cca5ed7b19e910ef5dbe6bb4fa02e5d934a4f942f
-
SHA512
5db5b7b1ff6afe4c3c235a92ecb0fa13869d4e7e5763aefb6bac3ad4fc5b99849beefff68bc4a8854581e070dd491f1c526a7c89866b36696d9756a2b47e5f95
-
SSDEEP
3072:G87lKH6QXryFttfFo0+mz3OYiT3BxlYbO8Mit5oU3omXvDqHAB1zCRUCz:GclKH6VttfFo0Vz3m3zynVCU3o5u1zUf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7496bbbfa84095c44da22a6748aece15_JaffaCakes118
Files
-
7496bbbfa84095c44da22a6748aece15_JaffaCakes118.exe windows:4 windows x86 arch:x86
a56cc1ec65143e2fab757e49200a60e1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
GetTickCount
LoadLibraryExA
GetVersion
HeapReAlloc
CloseHandle
InterlockedExchange
WaitForMultipleObjects
SuspendThread
GetSystemDefaultLangID
GetConsoleCP
CompareFileTime
GlobalUnlock
WaitForSingleObject
GetModuleHandleA
SetConsoleCP
HeapCreate
GetStdHandle
GetAtomNameA
lstrlenA
GetCommandLineA
user32
IsDialogMessage
GetCursorInfo
FillRect
InsertMenuA
CopyImage
DragObject
FindWindowA
GetKeyboardLayout
DispatchMessageA
CreateIcon
SetScrollInfo
GetKeyState
DrawCaption
DialogBoxParamA
GetDlgItem
DestroyMenu
EnableScrollBar
SetWindowPos
SetPropA
CreateMenu
InvertRect
advapi32
RegEnumKeyA
RegQueryInfoKeyA
RegEnumValueA
RegCloseKey
RegCreateKeyExA
apphelp
ApphelpCheckExe
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 788KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ