Static task
static1
Behavioral task
behavioral1
Sample
867cc76e72d9b81a15090bb39bf2658b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
867cc76e72d9b81a15090bb39bf2658b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
867cc76e72d9b81a15090bb39bf2658b_JaffaCakes118
-
Size
83KB
-
MD5
867cc76e72d9b81a15090bb39bf2658b
-
SHA1
ef28a672c0481172317b63c4541fe355a6e90ddc
-
SHA256
2f623f198db269278891a07ae74e22e519d64ec22587dcf3d451347c5b86e1df
-
SHA512
82a23ae04d4efb13ff553b8315c0ec1d4c011babef15ec8955634e1b7229cfebf7b4405ae6fabc632f4c1d734c3cde070e0be5e2b953c013a663f9c43dce3a25
-
SSDEEP
1536:/+yXWt4t/WFTIvuYqv//Qc4/KmDbsJAVGay5SxmOiARPD:/+yXaAWWQ/ssJn7OioL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 867cc76e72d9b81a15090bb39bf2658b_JaffaCakes118
Files
-
867cc76e72d9b81a15090bb39bf2658b_JaffaCakes118.exe windows:4 windows x86 arch:x86
7f5b2eb9b567a9d21cdee150727124c6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
CreateMutexA
GetACP
GetSystemTime
GetStdHandle
IsBadReadPtr
FreeConsole
lstrlenA
LocalFree
GetCPInfo
CreateEventA
FindClose
CloseHandle
GlobalLock
VirtualProtectEx
GetLastError
GetConsoleTitleW
GlobalUnlock
CancelIo
LoadLibraryExW
user32
DialogBoxParamA
ClipCursor
GetMessageA
GetMessageA
IsMenu
LoadCursorA
EndDialog
GetParent
GetDlgItemTextA
CreateWindowExA
IsIconic
GetKeyState
GetSubMenu
MessageBoxA
clbcatq
SetupSave
ComPlusMigrate
GetComputerObject
CheckMemoryGates
GetCatalogObject
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ