Static task
static1
Behavioral task
behavioral1
Sample
8a3cfc395e6b8f8b39377fcd2175a804_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8a3cfc395e6b8f8b39377fcd2175a804_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8a3cfc395e6b8f8b39377fcd2175a804_JaffaCakes118
-
Size
638KB
-
MD5
8a3cfc395e6b8f8b39377fcd2175a804
-
SHA1
99dbdaa2a0c4d59cbeaae0f8e13692c3d5465cbc
-
SHA256
2b0364864aaac5d04d62e6132a705d4f3ad2cb139c22459458c6d209278924f8
-
SHA512
90860ff697fa53cee411a4c7d5bfbfd8e993d160ef4743a154142ca40e0ebe46afebf6a1be1010f279ad64d109e716cb709ffb2bf4ab6f55e1d9465ef7e6b68c
-
SSDEEP
12288:pFgA+k6FrHtj1mzhTBGST08aQMh0+LoaccKU53N4cm9A08/C:paA+ky1mzh8g5arh0+0n44cm9p7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a3cfc395e6b8f8b39377fcd2175a804_JaffaCakes118
Files
-
8a3cfc395e6b8f8b39377fcd2175a804_JaffaCakes118.exe windows:4 windows x86 arch:x86
eea7ce172ba2df61d3ed4f2cf4be901e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalUnlock
GetACP
TlsFree
GetStdHandle
GetTickCount
CloseHandle
lstrlenA
TlsGetValue
CompareFileTime
GetProfileIntA
LoadLibraryA
GetVersion
WaitForSingleObject
HeapReAlloc
VirtualProtect
GetAtomNameA
HeapWalk
GetConsoleCP
FindAtomA
InterlockedExchange
GetModuleHandleA
user32
TranslateMessage
MessageBoxA
UpdateWindow
PaintDesktop
GetDlgItem
GetWindowTextA
ModifyMenuA
PostMessageA
DialogBoxParamA
GetScrollRange
DispatchMessageA
ShowWindow
EqualRect
CreateCaret
DestroyMenu
InflateRect
SubtractRect
GetMenuStringA
SetWindowPos
SetPropA
GetKeyboardLayout
GetMenu
EnableScrollBar
LoadIconA
InsertMenuA
CopyRect
msi
MsiCloseHandle
MsiDoActionA
MsiEnumProductsA
MsiEnumClientsA
MsiGetMode
ws2_32
WSAAccept
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ