Static task
static1
Behavioral task
behavioral1
Sample
87c502ec18f31fd0bc6728293019faee_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
87c502ec18f31fd0bc6728293019faee_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
87c502ec18f31fd0bc6728293019faee_JaffaCakes118
-
Size
305KB
-
MD5
87c502ec18f31fd0bc6728293019faee
-
SHA1
71be6df6d97f7bb67cddbb6b7ecda4fe30dfb316
-
SHA256
67d3a956865968cfae756563652a853298f17f0484725de254ba1edf70d4f562
-
SHA512
d7818711b7ec878aabe38dbf7e568a940a373ed2ceea71d3aa347f5c6f7379f4dd39ce492a2e9f32f8f7df3395a18e67fea73f5fa9e30ef51e4b802ac138ca9f
-
SSDEEP
6144:kLQs2Og+17jjh6DMFcFnP+zgL8Y4WKBtyUEg1TwXUx/caky:kUFRQvjIKg4IKtrQUxK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87c502ec18f31fd0bc6728293019faee_JaffaCakes118
Files
-
87c502ec18f31fd0bc6728293019faee_JaffaCakes118.exe windows:4 windows x86 arch:x86
cc8294b914b02e61722b72739c16d86d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateEventA
CreateIoCompletionPort
CreateMutexA
CreateThread
EnterCriticalSection
ExitThread
FindFirstFileA
FindNextFileA
FreeLibrary
GetCommandLineA
GetPrivateProfileStringA
GetTickCount
GetTimeFormatA
GetWindowsDirectoryA
GlobalAlloc
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
SetEvent
SetFilePointer
Sleep
TerminateProcess
WaitForSingleObject
WriteConsoleA
lstrcmpiA
lstrcpynA
lstrlenA
user32
AppendMenuW
CheckDlgButton
DrawFocusRect
EqualRect
FindWindowW
GetDesktopWindow
GetDlgItem
ReleaseDC
ScreenToClient
SetForegroundWindow
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 290KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ