Static task
static1
Behavioral task
behavioral1
Sample
87ed5aced236c2b7e15dc78a41202551_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
87ed5aced236c2b7e15dc78a41202551_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
87ed5aced236c2b7e15dc78a41202551_JaffaCakes118
-
Size
205KB
-
MD5
87ed5aced236c2b7e15dc78a41202551
-
SHA1
30d8772022fc7e5ba5255aa48bd5354f34ef035c
-
SHA256
9db3cfaeee9f5ef2b109adeaa3bac155d9e3b9e54af26d191f8eed74f41d5c8d
-
SHA512
8ae71f574d670f2d6cec16b265c472e785a18fb9c0d7a6b83c1e3531334c046aab4f0629bb3507653d224ba1b550f6572473b89486fb9200fb8c4fddd28fdef2
-
SSDEEP
3072:q3TM8Lk5oUePR1uk022luCsdYYVGL1C9qFq6tWt/oh7nUAxx2gqzGFa:bOGo/RWGYtL1C9qrd7nUAxx2gqzSa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87ed5aced236c2b7e15dc78a41202551_JaffaCakes118
Files
-
87ed5aced236c2b7e15dc78a41202551_JaffaCakes118.exe windows:1 windows x86 arch:x86
02c78b0f3a8b03362e0a73d394fc9bdc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
CreateFileMappingA
GetLocaleInfoA
FindResourceA
GetSystemInfo
GetFileTime
GetModuleFileNameA
TerminateThread
LoadLibraryA
GetModuleHandleA
GetStringTypeW
ResetEvent
WaitForSingleObject
Module32First
HeapAlloc
DeviceIoControl
FreeEnvironmentStringsW
RaiseException
GetNumberFormatA
FileTimeToSystemTime
GetStdHandle
lstrlenA
GetDateFormatA
GetCurrentThread
SetStdHandle
GetLastError
GetOEMCP
GetStartupInfoA
TlsAlloc
SetPriorityClass
HeapFree
VirtualQueryEx
user32
LoadImageA
DestroyWindow
SystemParametersInfoA
ChildWindowFromPoint
SetWindowPlacement
GetSystemMetrics
SetWindowLongA
SetMenuItemInfoA
IsDialogMessageA
ModifyMenuA
GetWindowLongA
GetDesktopWindow
WindowFromPoint
InflateRect
CheckDlgButton
SetScrollInfo
LoadCursorA
EnumChildWindows
RegisterClassExA
SetCursor
ClientToScreen
GetSysColorBrush
GetWindowDC
GetWindow
GetPropA
EnableMenuItem
GetKeyState
TrackPopupMenu
GetDC
GetCapture
RegisterWindowMessageA
DefFrameProcA
SetWindowTextA
EnableWindow
GetFocus
LoadAcceleratorsA
IntersectRect
DefDlgProcA
IsDlgButtonChecked
IsZoomed
SetFocus
CheckMenuItem
msvcrt
_except_handler3
__getmainargs
__p__commode
_XcptFilter
exit
_initterm
__setusermatherr
_controlfp
__set_app_type
memcpy
_acmdln
__p__fmode
_adjust_fdiv
_exit
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 54KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 164B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ