Static task
static1
Behavioral task
behavioral1
Sample
8b22e649a489675799212a3fd9396a5c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8b22e649a489675799212a3fd9396a5c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8b22e649a489675799212a3fd9396a5c_JaffaCakes118
-
Size
193KB
-
MD5
8b22e649a489675799212a3fd9396a5c
-
SHA1
944295f483d66b740b9e4ac443f383e84f3a79da
-
SHA256
1dc7073b4068cf2a5bdbf29161aeb393b9c7841e909166a0124bd029f1c47cc3
-
SHA512
d2be2320f9b0a39c806f48bb283b727ed49803bf8066e88822076a1ccd68ceb468bae4ff6929cad2175336010757708e70e6c3f2ff11b64a98aac84d7ab8360f
-
SSDEEP
3072:w00kA2/MgUdU9+hkcC21UEut4P6jn/YQyhP73eOlwhspatn9OK4Qvbao7:wBk9YU9+9xW4PKQQ2P7uOle4Un94QF7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b22e649a489675799212a3fd9396a5c_JaffaCakes118
Files
-
8b22e649a489675799212a3fd9396a5c_JaffaCakes118.exe windows:4 windows x86 arch:x86
f9996fbbc7213686cc1b7a3548771f04
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
GetModuleHandleA
GetConsoleCP
CompareFileTime
SuspendThread
WaitForMultipleObjects
InterlockedExchange
CloseHandle
GetAtomNameA
GetVersion
HeapReAlloc
VirtualProtect
SetConsoleCP
LoadLibraryExA
GlobalUnlock
WaitForSingleObject
GetStdHandle
GetSystemDefaultLangID
GetTickCount
lstrlenA
GetCommandLineA
user32
SetScrollInfo
DestroyMenu
FindWindowA
EnableScrollBar
SetPropA
GetCursorInfo
DrawCaption
IsDialogMessage
FillRect
InsertMenuA
SetWindowPos
InvertRect
GetDlgItem
GetKeyState
CreateIcon
DialogBoxParamA
DispatchMessageA
CreateMenu
DragObject
CopyImage
GetKeyboardLayout
advapi32
RegEnumKeyA
RegEnumValueA
RegQueryInfoKeyA
RegCreateKeyExA
RegCloseKey
apphelp
ApphelpCheckExe
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 796KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ