Static task
static1
Behavioral task
behavioral1
Sample
87dc3049f8353c9e9a995436b17b702e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
87dc3049f8353c9e9a995436b17b702e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
87dc3049f8353c9e9a995436b17b702e_JaffaCakes118
-
Size
362KB
-
MD5
87dc3049f8353c9e9a995436b17b702e
-
SHA1
116a9ad574da2db3fbc040ae92ca063e1cd6252b
-
SHA256
9e9b39ba36b148342661cd8f568755d181f6facfe0b9a67b0fc6c34b4dfa4b9b
-
SHA512
2a4f6460e758800df89a9d4dfa6186d3c8cc180480401335aa8c92e3cb7dbf2e2ce451cd5282533985da4ed6fab5bc5b5dc52061573ff63e391a40c2d4d7dcfa
-
SSDEEP
6144:gF1Q4p5rptVLMztkVwZcl2OzZ+hz06PiAsJXtfvWt73+mBGDbDvDhwufZIQo/unR:gF1Q4xtVLNV8GZmz1PiAsJ2+bDv1fZIm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87dc3049f8353c9e9a995436b17b702e_JaffaCakes118
Files
-
87dc3049f8353c9e9a995436b17b702e_JaffaCakes118.exe windows:4 windows x86 arch:x86
b206053622d8432093d4490f167dcf4c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
PeekConsoleInputA
GetTimeFormatA
GetACP
HeapDestroy
IsDebuggerPresent
LoadLibraryExA
FreeConsole
GetTapeStatus
GlobalMemoryStatus
GetUserDefaultLCID
WaitForSingleObject
HeapCreate
ResumeThread
GlobalSize
GetCurrentProcessId
GetCommandLineA
lstrlenA
GetSystemTime
VirtualProtect
GetModuleHandleA
InterlockedExchange
user32
GetClassNameA
ShowWindow
GetCursorPos
wsprintfA
GetDC
GetTitleBarInfo
GetParent
EndPaint
GetWindow
DrawTextA
ReleaseDC
GetFocus
FrameRect
SetForegroundWindow
DragDetect
AnyPopup
FillRect
CreateIcon
BeginPaint
ntshrui
GetNetResourceFromLocalPathA
GetLocalPathFromNetResourceA
IsFolderPrivateForUser
DllGetClassObject
SetFolderPermissionsForSharing
hnetcfg
DllGetClassObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 912KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ