Static task
static1
Behavioral task
behavioral1
Sample
892db7670ad246c43bec061cfe6fd7b3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
892db7670ad246c43bec061cfe6fd7b3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
892db7670ad246c43bec061cfe6fd7b3_JaffaCakes118
-
Size
238KB
-
MD5
892db7670ad246c43bec061cfe6fd7b3
-
SHA1
193ee4be4532c3782c7d837c9e8204c5e4a3dbfe
-
SHA256
d59cd675a0a0b03a1ec2a340dbc61eb4bf703b095fddf97e239ebb09c3c568a2
-
SHA512
a543f18547c51206230e3d7b10ef91e62b3dfc86bb49a36942f6eb88e83f06d72f0e2efddcd53230a662c87f05e93be3a2bbd037a900ce143bb520c65e037b80
-
SSDEEP
6144:nx8nunPuGRppmMxomdvtf17FLYnzOy0FHChI7U:x8ipQM/dvtxOnCLChIQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 892db7670ad246c43bec061cfe6fd7b3_JaffaCakes118
Files
-
892db7670ad246c43bec061cfe6fd7b3_JaffaCakes118.exe windows:4 windows x86 arch:x86
fda86bea7ea4391aeaf365641f4b88ae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
GetDriveTypeW
GetCommandLineA
TlsAlloc
GetSystemDefaultLangID
GetModuleFileNameA
FreeLibrary
TlsFree
GetCurrentThread
GetCurrentThreadId
GetSystemDefaultLCID
GetLogicalDrives
GetCurrentProcess
lstrcmpA
GetModuleHandleW
IsDBCSLeadByte
TlsSetValue
VirtualAlloc
TlsGetValue
GetACP
lstrcatA
user32
GetWindowLongA
UpdateWindow
IsWindowVisible
GetFocus
BeginPaint
GetWindowTextLengthA
IsIconic
ShowWindow
GetWindow
GetSystemMetrics
GetWindowDC
GetActiveWindow
GetForegroundWindow
GetClassLongA
CreateWindowExA
RegisterClassA
ReleaseDC
GetWindowTextA
GetDC
gdi32
GetStockObject
SetBkMode
GetObjectA
SetTextColor
SelectObject
DeleteObject
uxtheme
DrawThemeText
GetCurrentThemeName
DrawThemeIcon
EnableTheming
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 231KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ