Static task
static1
Behavioral task
behavioral1
Sample
84ec51ad7dbbbdf51f84a1063ecd0baf_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
84ec51ad7dbbbdf51f84a1063ecd0baf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
84ec51ad7dbbbdf51f84a1063ecd0baf_JaffaCakes118
-
Size
636KB
-
MD5
84ec51ad7dbbbdf51f84a1063ecd0baf
-
SHA1
591a58bbbe9235ce511e3bc4c058d6a2fbed38d2
-
SHA256
efa92f8a61fae788302d064129887363b13c19b1bb1924de2f2d0f8297a76fc2
-
SHA512
de6dc366e8440d9cf95a86e9a2acd5c480dbd5b4d25352ed0a833e7795d0a3679800b04596df6d1a88d0ee8efa34c0bfe17965aa47c79194b002631bcb48a9a4
-
SSDEEP
12288:rFCcWetVnPy63WqPjKaskE8xgZDeGZaLd3ZOjL8m0bfdAi1W/Lu6if4QQqMv07X:rFCMtVa63WqPjKash8ginFZO/8bbf+xK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84ec51ad7dbbbdf51f84a1063ecd0baf_JaffaCakes118
Files
-
84ec51ad7dbbbdf51f84a1063ecd0baf_JaffaCakes118.exe windows:4 windows x86 arch:x86
c0b74a4bd2b55577ebaf88b36cafbfe9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
GetModuleHandleA
GetCurrentThread
LoadLibraryA
OpenSemaphoreA
GetThreadPriority
GetTimeFormatA
HeapDestroy
WriteConsoleA
DeleteAtom
FlushFileBuffers
GetACP
GetStdHandle
GetEnvironmentStringsA
GetExpandedNameA
GetCurrentProcess
GetCurrentProcessId
FormatMessageA
InterlockedExchange
IsDebuggerPresent
HeapCreate
user32
GetWindow
GetClassNameA
FrameRect
EndPaint
DrawTextA
wsprintfA
BeginPaint
ValidateRgn
IsIconic
ShowWindow
FillRect
ReleaseDC
GetWindowTextLengthA
SetActiveWindow
GetCursorPos
GetDlgItem
GetFocus
SetForegroundWindow
GetParent
linkinfo
IsValidLinkInfo
ResolveLinkInfoA
DestroyLinkInfo
GetLinkInfoData
GetCanonicalPathInfoA
uxtheme
GetThemeSysFont
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ