Static task
static1
Behavioral task
behavioral1
Sample
8ac81ac1c0d49c1975f2a14e52066835_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8ac81ac1c0d49c1975f2a14e52066835_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8ac81ac1c0d49c1975f2a14e52066835_JaffaCakes118
-
Size
321KB
-
MD5
8ac81ac1c0d49c1975f2a14e52066835
-
SHA1
0b976266f6e25a0b0fd3a2508a9e9d6db754764d
-
SHA256
8f7a279a458ca63387e4173e823d7cc976fd878557996902cb5bd827fcdd2dd8
-
SHA512
026c801b734b6eee82e38a2b16b5dc3c0246d1c8b74ae8a4d4a56050a1de9b311c1f2c5b0649ae5f9576692d617856e53b7d13300d6f3bae5a88dba7c5509ab8
-
SSDEEP
6144:8dVhzctJoYKS6/TJ80uIe1NF/5dVI4vYXbuleeehcJY1CZ/Hko8ZjJjsXPpPkYfE:8dctJM/TJXe1RLYrutehGZ/v6JAXhMYs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ac81ac1c0d49c1975f2a14e52066835_JaffaCakes118
Files
-
8ac81ac1c0d49c1975f2a14e52066835_JaffaCakes118.exe windows:4 windows x86 arch:x86
18a9df0d4adb2066b8d5899769e71927
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LockResource
LoadLibraryExA
RaiseException
FoldStringA
GlobalFree
HeapCreate
GetLocaleInfoA
SetConsoleOutputCP
GetStdHandle
Sleep
SetErrorMode
GetDriveTypeA
EnterCriticalSection
VirtualProtect
InterlockedExchange
GlobalUnlock
GlobalDeleteAtom
GetACP
CloseHandle
GlobalAddAtomA
GetLastError
user32
GetCursorPos
GetActiveWindow
DrawTextA
ValidateRect
GetWindowTextA
ClipCursor
GetClassNameA
GetParent
IsIconic
CharToOemBuffA
GetFocus
GetMenuItemInfoA
GetWindow
ShowWindow
SetForegroundWindow
DrawEdge
BeginPaint
EndPaint
ReleaseDC
version
GetFileVersionInfoA
VerFindFileA
VerQueryValueA
VerInstallFileA
GetFileVersionInfoSizeA
rasadhlp
WSAttemptAutodialName
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 704KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ