Static task
static1
Behavioral task
behavioral1
Sample
87ce3a813d9e1944bfa7e4e7e9eaafae_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
87ce3a813d9e1944bfa7e4e7e9eaafae_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
87ce3a813d9e1944bfa7e4e7e9eaafae_JaffaCakes118
-
Size
321KB
-
MD5
87ce3a813d9e1944bfa7e4e7e9eaafae
-
SHA1
32725edd21a54a56695479d99c28ecae22b3549b
-
SHA256
aa8d961227daf913956ddc0bde3fb78963bfb428ac1e3cbac4b6022294e707fa
-
SHA512
bbae3aa2834f5db199459689aa10044cd71a2f8ebcedc3a06c3b9821d1a77ff2548139e86ad65223247f2995451d24fa8695fe9ba6215d93698bc8caf32040ee
-
SSDEEP
6144:EUjdVhzctJoYKS6/TJ80uIe1NF/5dVI4vYXbuleeehcJY1CZ/Hko8ZjJjsXPpPkF:fdctJM/TJXe1RLYrutehGZ/v6JAXhMYs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87ce3a813d9e1944bfa7e4e7e9eaafae_JaffaCakes118
Files
-
87ce3a813d9e1944bfa7e4e7e9eaafae_JaffaCakes118.exe windows:4 windows x86 arch:x86
7787a77d152b891f3af2416a107701c5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetACP
GlobalFree
GlobalDeleteAtom
EnterCriticalSection
HeapCreate
GetStdHandle
GlobalAddAtomA
SetErrorMode
InterlockedExchange
GetLocaleInfoA
LoadLibraryExA
SetConsoleOutputCP
RaiseException
FoldStringA
CloseHandle
Sleep
GlobalUnlock
GetDriveTypeA
VirtualProtect
LockResource
user32
GetClassNameA
GetActiveWindow
SetForegroundWindow
ValidateRect
DrawEdge
GetMenuItemInfoA
BeginPaint
ClipCursor
GetWindowTextA
GetParent
IsIconic
DrawTextA
CharToOemBuffA
GetWindow
GetCursorPos
ShowWindow
GetFocus
ReleaseDC
EndPaint
version
VerInstallFileA
VerQueryValueA
GetFileVersionInfoA
VerFindFileA
GetFileVersionInfoSizeA
rasadhlp
WSAttemptAutodialName
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 704KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ