Static task
static1
Behavioral task
behavioral1
Sample
8e458d6dcf2383c67d39b3dd612a697f_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
8e458d6dcf2383c67d39b3dd612a697f_JaffaCakes118
-
Size
61KB
-
MD5
8e458d6dcf2383c67d39b3dd612a697f
-
SHA1
bd5e7ff28c17865e01018782d695bf668422a6de
-
SHA256
1a1cf9e1bc740efa559c6323c9821e7cfdd1c22cc9338a57c43ca0d40cd1eda7
-
SHA512
29f94a18ecd85c51db9709df54b35d6b545549321d714c1b085ba90d329497dac991b626732d906adc0a1dae7b4b40e738bbebb8d3eb9f309f58ba8da9569359
-
SSDEEP
1536:SVi/3Fk+7qCc/HaRHK2VS41MJETYrZi2jpnYkek7M9yJb:RQyRHK2VS4jUFReZoM9w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e458d6dcf2383c67d39b3dd612a697f_JaffaCakes118
Files
-
8e458d6dcf2383c67d39b3dd612a697f_JaffaCakes118.exe windows:4 windows x86 arch:x86
49018842badf63eb432019932ea24f2c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetLogicalDrives
GlobalFindAtomA
SetConsoleInputExeNameA
OpenFileMappingW
WriteConsoleOutputCharacterA
MoveFileExW
GetCommandLineA
ExitVDM
SetDllDirectoryA
GetProcessVersion
PeekConsoleInputA
FatalAppExitW
GetCommProperties
ChangeTimerQueueTimer
UnlockFile
GetNumberOfConsoleMouseButtons
VirtualProtectEx
SetConsoleNumberOfCommandsA
GetVolumeNameForVolumeMountPointA
OpenSemaphoreA
ExitThread
GetTempPathA
GetConsoleCursorMode
VirtualAlloc
LoadLibraryExW
user32
GetSubMenu
MessageBoxTimeoutA
DefFrameProcA
SendNotifyMessageA
GetWindowTextLengthA
RedrawWindow
GetTabbedTextExtentA
EnumDesktopsA
GetClipboardViewer
DrawStateA
LoadLocalFonts
SetWindowPos
TabbedTextOutA
OemKeyScan
ChildWindowFromPointEx
CloseClipboard
GetGUIThreadInfo
SetWindowStationUser
GetParent
DefMDIChildProcA
SetCursorPos
RecordShutdownReason
GetUserObjectInformationA
FindWindowExW
DrawCaption
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 226KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ