Static task
static1
Behavioral task
behavioral1
Sample
835ba7a2ffc4a014e25f934292942477_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
835ba7a2ffc4a014e25f934292942477_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
835ba7a2ffc4a014e25f934292942477_JaffaCakes118
-
Size
315KB
-
MD5
835ba7a2ffc4a014e25f934292942477
-
SHA1
2dd35b93d276351929a447830525471cc967b2e3
-
SHA256
0d00ece850f769cdc27177f7329cf68e71489e56bba6cda8795e66a33678e721
-
SHA512
5b2aaf7a52cc6dd4d72de990ae780704879928f11df3df269a824d26a94045570b521fbb265d7d122e27e7b661df9198cac4f34a48f7a5b1feccece53784d4d2
-
SSDEEP
6144:cy9bdVO/ct47XUk5nIalY+tlIRfFf13tr+bFn7blQXNH:cKVOkKwWlIRfFLFXN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 835ba7a2ffc4a014e25f934292942477_JaffaCakes118
Files
-
835ba7a2ffc4a014e25f934292942477_JaffaCakes118.exe windows:4 windows x86 arch:x86
fe431b3dca5ce13d101e5e2d0c0d1d36
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetProcAddress
VirtualAlloc
GetModuleHandleA
GlobalLock
GetLastError
VirtualFree
ExitProcess
CreateTimerQueue
PulseEvent
OpenMutexA
HeapFree
CreateEventA
LeaveCriticalSection
TlsSetValue
HeapAlloc
HeapReAlloc
RtlUnwind
LoadLibraryA
GetCurrentProcess
TerminateProcess
GetModuleFileNameA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
user32
InSendMessage
PostQuitMessage
RegisterClassA
GetTopWindow
GetDesktopWindow
ole32
CoCreateInstance
CoUninitialize
CoInitialize
psapi
GetWsChanges
msvfw32
DrawDibStart
ICRemove
Sections
.text Size: 108KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 304B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 191KB - Virtual size: 534KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE