Static task
static1
Behavioral task
behavioral1
Sample
72b72aa844284121f7140a46ec608f1a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
72b72aa844284121f7140a46ec608f1a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
72b72aa844284121f7140a46ec608f1a_JaffaCakes118
-
Size
295KB
-
MD5
72b72aa844284121f7140a46ec608f1a
-
SHA1
0cab72743d3c8f58912a4567ed1d6eae8996e1a6
-
SHA256
e435d68e9f671cb56c6fe1ab59d27a20ca072f6972377d6410d144322cddb671
-
SHA512
327503a8ea6025b2956a13337aa1eaa33db7db0c31cac25ba7ac7ade6c7b2538e96121c0747ca987c83c14226315441bbd4c200b2877f6cc2624a45ecbccccf1
-
SSDEEP
6144:tWC5IcrSxP01ywt1KZZPS7w5+eKJxrmF9gxnXZWkta:UMG5uiPewu0mjWa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72b72aa844284121f7140a46ec608f1a_JaffaCakes118
Files
-
72b72aa844284121f7140a46ec608f1a_JaffaCakes118.exe windows:4 windows x86 arch:x86
b7d2a2994b29e715cbefdc522286c376
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateEventA
CreateIoCompletionPort
CreateThread
DeleteFileA
EnterCriticalSection
ExitThread
FormatMessageA
GetCurrentProcessId
GetCurrentThreadId
GetFileSize
GetTickCount
GlobalAlloc
InitializeCriticalSection
IsBadCodePtr
LeaveCriticalSection
LoadLibraryA
LocalReAlloc
MapViewOfFile
MoveFileW
RaiseException
SetEvent
Sleep
WaitForSingleObject
WriteConsoleA
lstrcmpiA
lstrlenA
user32
FindWindowA
GetClientRect
GetKeyState
GetSystemMetrics
IsDlgButtonChecked
IsRectEmpty
IsWindowVisible
PtInRect
RedrawWindow
RemovePropW
SendMessageW
SetMenuItemInfoW
SetWindowPlacement
SetWindowTextW
TranslateAcceleratorW
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 280KB - Virtual size: 282KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ