Static task
static1
Behavioral task
behavioral1
Sample
82b4e2b5410ef93a879a779a8e5a1528_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
82b4e2b5410ef93a879a779a8e5a1528_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
82b4e2b5410ef93a879a779a8e5a1528_JaffaCakes118
-
Size
99KB
-
MD5
82b4e2b5410ef93a879a779a8e5a1528
-
SHA1
151ce28f5ea6d69a06cc3cf4f83b9672b25f1ea7
-
SHA256
6c538fcbe74910dab3abf4fe95b12bfeb5e22b07e63b14d0f49451f827ab8a33
-
SHA512
eee2b1d74438ba5c528bfc6e7d2a727909fc6f646352907e3895aff7e2a89bb852b80f0c90aefdb7c6d94bcb5579f7596c981ad0017126b10acd187c1bd58939
-
SSDEEP
3072:dec0fauW3dVNwyCRMZ2rFKFV50DfWIVzz92s64Tt:dex7W3dtMMZBX50DpVz4qt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82b4e2b5410ef93a879a779a8e5a1528_JaffaCakes118
Files
-
82b4e2b5410ef93a879a779a8e5a1528_JaffaCakes118.exe windows:4 windows x86 arch:x86
b737bc5ff32e023eddad683664650547
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndDialog
ShowOwnedPopups
DeferWindowPos
IsWindowVisible
CloseWindow
GetWindowTextLengthA
GetDlgItemInt
IsWindowUnicode
EnumThreadWindows
GetSysColor
SetDlgItemTextA
SetWindowPos
GetWindowTextA
ole32
CoTaskMemRealloc
OleCreateEmbeddingHelper
CoLockObjectExternal
FreePropVariantArray
GetHGlobalFromILockBytes
CoIsOle1Class
CreateDataCache
OleQueryCreateFromData
OleSetMenuDescriptor
OleFlushClipboard
OleRegGetUserType
CoGetTreatAsClass
OleSetClipboard
OleNoteObjectVisible
kernel32
LocalHandle
GetModuleHandleA
SuspendThread
CloseHandle
SetEvent
ResumeThread
VirtualAlloc
GetExitCodeThread
OpenEventA
OpenMutexA
ReleaseMutex
ResetEvent
GetProcAddress
IsBadReadPtr
HeapFree
HeapLock
GetStringTypeW
GetSystemDefaultLangID
GetStartupInfoA
IsValidCodePage
IsBadCodePtr
GetSystemDefaultLCID
LocalFree
OpenSemaphoreA
VirtualFree
msvcrt
exit
_exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 276KB - Virtual size: 377KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ