Static task
static1
Behavioral task
behavioral1
Sample
8632122f47f0fffb7891f4d43a54b8ff_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8632122f47f0fffb7891f4d43a54b8ff_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8632122f47f0fffb7891f4d43a54b8ff_JaffaCakes118
-
Size
111KB
-
MD5
8632122f47f0fffb7891f4d43a54b8ff
-
SHA1
63f2b7211cfba2c56add00851da46d0bea942cf3
-
SHA256
cef7c110611392d4294e97aaec5e5d6e3c58bd9db3ab809df9e281892d9ffa65
-
SHA512
1ff76862c5228bf0842401e464a445c05345a2fad1fcf2f3fe9f7015a7f810d635e38514aa8ae80e46c5fd2cad3b2e5406038b0b15d702880bf27520992d1fc2
-
SSDEEP
1536:/Y3lOIc7J6mp2JzNUfUQ+3/6C4Vxex6nWe8zW3dBgJSmo:/GOdcmpi2fEPKh8a3v8St
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8632122f47f0fffb7891f4d43a54b8ff_JaffaCakes118
Files
-
8632122f47f0fffb7891f4d43a54b8ff_JaffaCakes118.exe windows:4 windows x86 arch:x86
f52a72c40acad0a739cf7f92acc318bb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
InitializeCriticalSection
GetFileAttributesA
ReadFile
GlobalDeleteAtom
VirtualAlloc
VirtualAllocEx
lstrcpynA
GetOEMCP
FindFirstFileA
MoveFileExA
GlobalAlloc
ExitThread
LocalFree
GetUserDefaultLCID
GetProcAddress
LoadResource
EnterCriticalSection
VirtualQuery
FormatMessageA
MulDiv
GetACP
WideCharToMultiByte
Sleep
GetVersionExA
version
VerFindFileA
VerQueryValueA
user32
GetActiveWindow
DispatchMessageA
GetSysColor
IsWindow
WaitMessage
ReleaseCapture
RegisterClassA
SetClipboardData
IsDialogMessageW
MessageBeep
GetKeyNameTextA
EnableScrollBar
InvalidateRect
UpdateWindow
InsertMenuItemA
IsWindowUnicode
CharUpperBuffA
GetWindowThreadProcessId
OpenClipboard
MessageBoxA
PtInRect
InflateRect
UnregisterClassA
GetCursor
GetWindow
SendMessageA
EnumChildWindows
DrawAnimatedRects
ClientToScreen
GetDlgItem
GetWindowTextA
GetKeyState
WindowFromPoint
GetFocus
CreateIcon
MoveWindow
GetKeyboardType
DeleteMenu
LoadCursorA
GetTopWindow
EnumThreadWindows
IsChild
DestroyMenu
DestroyWindow
shell32
SHGetDiskFreeSpaceA
SHGetDesktopFolder
gdi32
SetTextColor
GetClipBox
GetDCOrgEx
SetBkMode
Sections
.text Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 419B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
BSS Size: 512B - Virtual size: 30B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 154B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ