Static task
static1
Behavioral task
behavioral1
Sample
7820331a38d2bd7844ae0d75dd8d8d5f_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
7820331a38d2bd7844ae0d75dd8d8d5f_JaffaCakes118
-
Size
417KB
-
MD5
7820331a38d2bd7844ae0d75dd8d8d5f
-
SHA1
8c294b46416d927d18254b3d58963fcd8d229c51
-
SHA256
1ac6db5d00cb4a3010efa7464b07eeb490b88e2abb5d98276642d7be0d8010cd
-
SHA512
8068c5a6a031be44c3cf364ec488928afcc270e3a7bc6e3b1e402bae3165e5e569e027f1dc89a33bcf191f3de49f35a0248aa8f816be09e210feb27f8218bc6d
-
SSDEEP
6144:2P4YCqLZh14jvgvqh9Q0CUSGTEkARBNDgbq8M9Mxdb9feBc1e:Sh1vqhi0Cy4kARLBak
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7820331a38d2bd7844ae0d75dd8d8d5f_JaffaCakes118
Files
-
7820331a38d2bd7844ae0d75dd8d8d5f_JaffaCakes118.exe windows:4 windows x86 arch:x86
bf2a5f6d59f3279ea3f82ae3ec984c79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalCompact
VirtualAlloc
GetOEMCP
GlobalLock
EnterCriticalSection
LoadResource
GetStdHandle
GlobalAddAtomA
ExitThread
DeleteAtom
GlobalFindAtomA
GetProcessHeap
CloseHandle
GetCommState
lstrcpyn
RaiseException
LoadLibraryExA
GlobalFree
LocalSize
GetProfileStringA
ClearCommBreak
user32
GetWindowTextA
GetClassNameA
GetForegroundWindow
IsIconic
GetClassInfoExA
EndPaint
CloseWindow
ValidateRect
ShowWindow
GetDC
GetFocus
GetActiveWindow
GetWindowTextLengthA
GetParent
GetWindow
BeginPaint
RegisterClassA
ReleaseDC
DrawEdge
wsock32
WSAAsyncSelect
WSACleanup
WSAGetLastError
WSAIsBlocking
WSAStartup
duser
GetStdColorF
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ