Static task
static1
Behavioral task
behavioral1
Sample
895328d92d050265fc5bc8a4f871bb19_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
895328d92d050265fc5bc8a4f871bb19_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
895328d92d050265fc5bc8a4f871bb19_JaffaCakes118
-
Size
97KB
-
MD5
895328d92d050265fc5bc8a4f871bb19
-
SHA1
0bd417ca90fa8834e1c4f74b12f77d80f669e518
-
SHA256
4f87f4567aabdccbef4a36b068db3a001289346af3c712f7d6e70d5c6b5ed3dd
-
SHA512
3911fc8ca9db4fbbcacfdb087cf898040f2eef55d8e33150c6859d92ef28d8cd8712ef9398df055a099e4e198a2457582e1ffb91e568d4c20149c7dca5332807
-
SSDEEP
1536:iI37Pz2glXCbvOBybuYZmVi9ypZ13Jt1MwoWwbqW2BfVM5T9tiOaXRaTbVe9:iE7Pz2gXCbmw3m9DJ3WsK9tKETb4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 895328d92d050265fc5bc8a4f871bb19_JaffaCakes118
Files
-
895328d92d050265fc5bc8a4f871bb19_JaffaCakes118.exe windows:4 windows x86 arch:x86
484192395d4f22780f9f1cbedf72983e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetWindowsDirectoryA
GetModuleFileNameA
ExitProcess
GetModuleHandleA
GetStartupInfoA
user32
SetWindowPos
EndPaint
FillRect
GetMenuState
SetWindowPlacement
PostQuitMessage
KillTimer
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
InvalidateRect
DestroyWindow
BeginPaint
EnableMenuItem
GetClientRect
gdi32
SelectObject
DeleteDC
BitBlt
CreateCompatibleDC
DeleteObject
SetBkMode
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
memset
malloc
sprintf
strlen
strcpy
rand
memcpy
srand
time
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ