Static task
static1
Behavioral task
behavioral1
Sample
75913238461f3fed75ab831afe8d3c3c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
75913238461f3fed75ab831afe8d3c3c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
75913238461f3fed75ab831afe8d3c3c_JaffaCakes118
-
Size
365KB
-
MD5
75913238461f3fed75ab831afe8d3c3c
-
SHA1
9e26564905fa1fd702a38ad25344d04241dedb09
-
SHA256
42184316710e74f6ba230b699f2f8da9faa3e7de3aff886d1cc2129be98f85e4
-
SHA512
b89ff583cdcdcd88e4a4172f43e3114d1f566b0259c5bbb4e8760d09924b25400b1b7cca29507db720f29092a090452b50ffd119fb3faac01831e5a1aea8d04c
-
SSDEEP
6144:2FEvx0NXgEJL8kTvI/qFUmZQab7T5kaRJMggJEEVlRbkSD+WyWIaNmp:2FEvC+EJVTU5OQdaRag4ESluSDj3q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75913238461f3fed75ab831afe8d3c3c_JaffaCakes118
Files
-
75913238461f3fed75ab831afe8d3c3c_JaffaCakes118.exe windows:4 windows x86 arch:x86
aa63b8ab21d59ad44a49bf9a7950e3ba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexA
EnumResourceTypesA
LoadLibraryExW
GetModuleHandleA
SetLastError
GetLastError
GetTickCount
GetComputerNameA
CloseHandle
VirtualProtect
Sleep
ReleaseMutex
FreeConsole
TlsGetValue
GetDiskFreeSpaceExW
GetExitCodeProcess
GetDriveTypeA
FindClose
DeleteCriticalSection
GetCommandLineA
shell32
DllGetVersion
DragQueryFileA
DragAcceptFiles
SHFree
ShellAboutA
SHGetNewLinkInfo
ShellMessageBoxA
SHGetDiskFreeSpaceA
DragFinish
StrChrA
SHGetSettings
SheChangeDirA
SHGetMalloc
glmf32
glsChannel
glsBinary
glsBlock
glsComment
glsAppRef
user32
MessageBoxA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ