Static task
static1
Behavioral task
behavioral1
Sample
84b5b5c3bd04d19a8c37bea63abd96aa_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
84b5b5c3bd04d19a8c37bea63abd96aa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
84b5b5c3bd04d19a8c37bea63abd96aa_JaffaCakes118
-
Size
162KB
-
MD5
84b5b5c3bd04d19a8c37bea63abd96aa
-
SHA1
ccb21d3e9f078b2774ca624494741cb2d56c7393
-
SHA256
c1f23ea4e79db5096fa452201a9caabc51efe64bf2238ddad67f7c900f7d1d87
-
SHA512
715b40374490e3ddbfc6f945dda091161c9899ec6896752009c6203b99500e1b7b0b14773d0f97d6c448bbf07c1b6283dfa86401baaceec3432a8845e14101a7
-
SSDEEP
3072:oc5f2D9qJSYGO9Gio0wIufpO7up7I0Rr0ytFYsel324:ocUhASYVAiqO7upDR9Y32
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84b5b5c3bd04d19a8c37bea63abd96aa_JaffaCakes118
Files
-
84b5b5c3bd04d19a8c37bea63abd96aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
1605eaed388d187ef3e01a559f1c1e76
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
ReleaseCapture
UpdateWindow
IsWindow
DestroyWindow
SetCapture
ValidateRgn
IsWindowEnabled
FlashWindow
ExcludeUpdateRgn
EnableWindow
RealGetWindowClassA
ValidateRect
InvalidateRgn
GetCapture
GetUpdateRgn
kernel32
FindResourceW
SetEnvironmentVariableW
FindFirstFileW
GetSystemDirectoryW
ConvertFiberToThread
FindClose
CompareStringA
SetThreadIdealProcessor
GetStringTypeW
LocalAlloc
GetOEMCP
FileTimeToLocalFileTime
SystemTimeToFileTime
EnumResourceNamesW
GetShortPathNameW
GetCurrentProcess
LocalFree
FindNextFileW
FreeLibrary
GetLocalTime
LCMapStringW
RegisterWaitForSingleObject
FileTimeToSystemTime
SetErrorMode
LoadResource
SetCurrentDirectoryW
LocalFileTimeToFileTime
IsBadReadPtr
SearchPathW
Sections
.text Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imul Size: 1024B - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ