Static task
static1
Behavioral task
behavioral1
Sample
759e1ef9b5368df084366ced80200368_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
759e1ef9b5368df084366ced80200368_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
759e1ef9b5368df084366ced80200368_JaffaCakes118
-
Size
636KB
-
MD5
759e1ef9b5368df084366ced80200368
-
SHA1
63a014d1e430cffd470df7aaa6e0a95deb69d7fe
-
SHA256
c185365da2ecad0ed0bc9f03c8b6d2c9acf505d1c443de646a3325883bac8b6c
-
SHA512
154cdf439c9a4ccfa9a80173f77840fc0cc46dd854edaff9cbd09f78d6440465dada6987437d8d3a501d78103dfcc82cd02663cc251cbb16683cdf03fe67b2d3
-
SSDEEP
12288:mDkxkB3WHQjD4JIVhFpDT0o63+wiaAslHUX5DeBEhpe6VGb5+cSABkz6:SRUwD4JSFpJ6OwiaXHUqEhQDbETABk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 759e1ef9b5368df084366ced80200368_JaffaCakes118
Files
-
759e1ef9b5368df084366ced80200368_JaffaCakes118.exe windows:4 windows x86 arch:x86
a548a5fc57c8986fe4af67e6013e0d05
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
CompareFileTime
LoadLibraryExA
GetTickCount
GetConsoleCP
InterlockedExchange
GetSystemDefaultLangID
GlobalUnlock
VirtualProtect
WaitForMultipleObjects
SuspendThread
CloseHandle
HeapCreate
GetAtomNameA
lstrlenA
GetVersion
GetModuleHandleA
SetConsoleCP
WaitForSingleObject
HeapReAlloc
GetCommandLineA
user32
DispatchMessageA
GetKeyState
DrawCaption
DialogBoxParamA
SetPropA
DragObject
InvertRect
GetDlgItem
GetCursorInfo
GetKeyboardLayout
FindWindowA
CreateIcon
SetScrollInfo
IsDialogMessage
EnableScrollBar
CreateMenu
SetWindowPos
FillRect
DestroyMenu
InsertMenuA
CopyImage
advapi32
RegEnumKeyA
RegCreateKeyExA
RegQueryInfoKeyA
RegCloseKey
RegEnumValueA
uxtheme
GetThemeColor
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ