Static task
static1
Behavioral task
behavioral1
Sample
840302883311c8d12f413c09af2653e9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
840302883311c8d12f413c09af2653e9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
840302883311c8d12f413c09af2653e9_JaffaCakes118
-
Size
65KB
-
MD5
840302883311c8d12f413c09af2653e9
-
SHA1
58a8d2deb186843fc7aba9304c2495207ea35ae6
-
SHA256
a08905d1b6d44f50b77c16aac3b3a3e4a451916785b224dc90fce60df4b370e2
-
SHA512
1cf6cf53fee5b4d7b32650ac8f59256391372bdbd4324c15633a0fa033f8eb957320eb8cd480583d681650eedb5bea45a4529958eec363824cca201d9815f918
-
SSDEEP
1536:/jfGC8VgcKsAnuW6geKuwPmz5555555555555AZ6LrJyNchXDvU:bfSKcKsAnuWxqwmz5555555555555AYm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 840302883311c8d12f413c09af2653e9_JaffaCakes118
Files
-
840302883311c8d12f413c09af2653e9_JaffaCakes118.exe windows:4 windows x86 arch:x86
1ca15d1722516b012ae7b5c2ed97e70e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
GlobalUnlock
TlsGetValue
CloseHandle
SetLastError
HeapCreate
ReleaseMutex
GetModuleHandleA
LoadLibraryExA
GetProcessHeap
CreateFileA
GetExitCodeProcess
lstrlenW
TlsAlloc
FindResourceA
GetCurrentThreadId
CreateMutexA
DeleteAtom
GetStdHandle
GetEnvironmentVariableA
user32
DispatchMessageA
DrawEdge
CheckRadioButton
CreateWindowExA
GetDlgItem
GetDC
CreateMenu
FillRect
SetFocus
IsWindow
DrawMenuBar
GetCaretPos
CallWindowProcA
rsaenh
CPDeriveKey
CPGenKey
CPSignHash
CPHashData
CPDecrypt
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
himvdzs Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE