Static task
static1
Behavioral task
behavioral1
Sample
868837fa159a0005f05af2a0f1d02495_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
868837fa159a0005f05af2a0f1d02495_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
868837fa159a0005f05af2a0f1d02495_JaffaCakes118
-
Size
43KB
-
MD5
868837fa159a0005f05af2a0f1d02495
-
SHA1
7c98fcae9c297f4512e93e3e10154d7fad4310a8
-
SHA256
096a5143541765a31fb6938fc46fac83b9f2b90922f9ba2792929a2b4ee4823a
-
SHA512
eb1c6877215d63abd82f1ce6258ab7c9f73792fe49f575f4c8e3631501d785d6e9b74ea7d830b61ba5d6a6c5b66060d06e2ab2c08d5df24634cd00fd2204439e
-
SSDEEP
192:65RmPCJMtNvpbBFODWoQP6d/VFSMhMqgkj:wIPCSNvBB3P6d7hgG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 868837fa159a0005f05af2a0f1d02495_JaffaCakes118
Files
-
868837fa159a0005f05af2a0f1d02495_JaffaCakes118.exe windows:4 windows x86 arch:x86
90f26764f076db1747c6579eb136f068
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceW
CreateFileW
SetLastError
lstrlenA
GetCurrentDirectoryA
LoadLibraryExW
Sleep
LocalFree
GetCommandLineA
GetComputerNameA
GetCurrentThreadId
UnmapViewOfFile
HeapCreate
lstrcpyA
PulseEvent
CloseHandle
GetModuleHandleA
CreateProcessA
FindClose
GlobalUnlock
user32
CreateWindowExA
CreateIcon
IsWindow
GetCaretPos
DispatchMessageA
DrawEdge
GetDC
CallWindowProcA
DrawMenuBar
SetFocus
FillRect
CheckRadioButton
GetDlgItem
cryptui
CryptUIDlgSelectCA
WizardFree
LocalEnroll
CryptUIDlgSelectStoreA
CryptUIDlgCertMgr
msctf
TF_InitSystem
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE