Static task
static1
Behavioral task
behavioral1
Sample
8829f2861a33c92cbdca12ec75a539b2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8829f2861a33c92cbdca12ec75a539b2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8829f2861a33c92cbdca12ec75a539b2_JaffaCakes118
-
Size
363KB
-
MD5
8829f2861a33c92cbdca12ec75a539b2
-
SHA1
e4e67a7213fb8fcafb5810f923561c839f9db61a
-
SHA256
6e6b59872bf41c8e4e034bd82a0362a4b61510a522158734127dd18a20e52b49
-
SHA512
f22c7fe4e4722e3d26cff35f275945810b314a2ad71b56b71ed0dc3d09cf13b6f075c0be7de01dbac6f9cf5ffb3c767987ea2ef1c1154f1c873ff2c2d40ae561
-
SSDEEP
6144:tRMMha4hib4j8jf51Qx7O6bcLehsEwkoK/6ERdFQJdlMu6lb/01apjbV6m8lL:tRMMQx4ojf51aTcK0NEQUd0op3QlL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8829f2861a33c92cbdca12ec75a539b2_JaffaCakes118
Files
-
8829f2861a33c92cbdca12ec75a539b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
9ad69ffc90d01926e484fdf7a455471e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeW
EnumCalendarInfoW
HeapCreate
GlobalFree
ResumeThread
ReadFile
GetCurrentThreadId
GetPrivateProfileStringW
CreateMailslotA
GetCurrentProcessId
FindClose
FindAtomW
GetFileAttributesA
GetModuleHandleA
GetModuleFileNameA
LocalFree
SetLastError
EnterCriticalSection
GetConsoleAliasW
SetEvent
user32
DispatchMessageA
GetMenuInfo
DrawTextW
IsWindow
SetFocus
GetCursorInfo
GetSysColor
DispatchMessageA
GetKeyboardType
GetClientRect
GetKeyState
CallWindowProcW
GetClassInfoA
asycfilt
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
msasn1
ASN1BERDecBool
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 353KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ