Static task
static1
Behavioral task
behavioral1
Sample
898c354177b440c2c634ec09f47d1894_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
898c354177b440c2c634ec09f47d1894_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
898c354177b440c2c634ec09f47d1894_JaffaCakes118
-
Size
328KB
-
MD5
898c354177b440c2c634ec09f47d1894
-
SHA1
4eeeede3920e7265521d75183169b51715913951
-
SHA256
d558c0ff726ad0d9065e49221c87612560b7e4b960894ac30af402fc62e27f57
-
SHA512
2705b9606d9c40425c362866dfe4972e2a37e39cd566857cd319710362e49d1b45fcf643fc03b24bab60e4ecf2f0e41eb941004481b2d9e026f42f81f3ccc036
-
SSDEEP
6144:uxVpBMDHXxy+CdFr/GJS0hGaMUXjyIU4Ozwp05M8:Y7OD3wDjTGJZcatjQXzksM8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 898c354177b440c2c634ec09f47d1894_JaffaCakes118
Files
-
898c354177b440c2c634ec09f47d1894_JaffaCakes118.exe windows:4 windows x86 arch:x86
51dff54a548c2abc6b653d523e4cef24
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
HeapReAlloc
WaitForMultipleObjects
CompareFileTime
GetConsoleCP
SuspendThread
SearchPathA
GetCommandLineA
HeapCreate
GetTickCount
SetConsoleCP
lstrlenA
GlobalUnlock
GetAtomNameA
GetVersion
GetStdHandle
CloseHandle
GetSystemDefaultLangID
GetModuleHandleA
VirtualProtect
WaitForSingleObject
user32
DispatchMessageA
GetDlgItem
DestroyMenu
DialogBoxParamA
CreateMenu
MessageBoxA
GetCursorInfo
IsDialogMessage
FindWindowA
CreateIcon
DispatchMessageA
SetScrollInfo
SetPropA
DragObject
GetKeyState
DrawCaption
EnableScrollBar
SetWindowPos
GetKeyboardLayout
CopyImage
CreateCursor
InsertMenuA
InvertRect
advapi32
RegQueryInfoKeyA
RegEnumValueA
RegCloseKey
RegEnumKeyA
RegCreateKeyExA
uxtheme
GetThemeColor
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ