Static task
static1
Behavioral task
behavioral1
Sample
86e492b2c0934433780b81f11f903c86_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
86e492b2c0934433780b81f11f903c86_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
86e492b2c0934433780b81f11f903c86_JaffaCakes118
-
Size
352KB
-
MD5
86e492b2c0934433780b81f11f903c86
-
SHA1
8eccbbe67a8cc63ea41938643bda3b39be007ba6
-
SHA256
8504a4235a5af3d8d0a4cd1ef3ac1227844463769826259fdd2c2972ed76e30d
-
SHA512
5e8ab1e6283060059d49ce9eae51b8a4f84c845df612e1e978b0672a78979707602f52a0d6b5f08bad322ba755aa3b850607ba6bf40f1762e6d7fda4a845dc42
-
SSDEEP
6144:ymmQ0zANEa8Li1bWlWjkoCtfwR+RwBT4M9NdX753uSUQ1sab3n5LuPbNNi047:pV08N5qAWgko8wR54aN7mwsSJSBwz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86e492b2c0934433780b81f11f903c86_JaffaCakes118
Files
-
86e492b2c0934433780b81f11f903c86_JaffaCakes118.exe windows:4 windows x86 arch:x86
3bb6c5e22815e51e2473334b245b2b83
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTime
CloseHandle
GetModuleHandleA
lstrlenA
LocalFlags
FreeConsole
GetStdHandle
GlobalUnlock
FindClose
IsBadReadPtr
LocalFree
LoadLibraryExW
CreateEventA
VirtualProtectEx
GetConsoleTitleW
GlobalLock
GetLastError
OpenMutexA
OpenMutexA
GetACP
user32
DialogBoxParamA
GetMessageA
IsMenu
GetMessageA
CreateWindowExA
GetDlgItemTextA
GetParent
GetSubMenu
GetKeyState
IsIconic
EndDialog
LoadCursorA
ClipCursor
MessageBoxA
uxtheme
EnableTheming
CloseThemeData
DrawThemeBackground
GetCurrentThemeName
DrawThemeText
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ