Static task
static1
Behavioral task
behavioral1
Sample
8eece73e5adac22e36650c9e69521815_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8eece73e5adac22e36650c9e69521815_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8eece73e5adac22e36650c9e69521815_JaffaCakes118
-
Size
352KB
-
MD5
8eece73e5adac22e36650c9e69521815
-
SHA1
304948f9172d8b9b198c8c6ff7339e71e729d1a5
-
SHA256
2c5e65a4014c873d40c8563971d0b3e74c4eaedc15f8bfbae26432dcd2887dd4
-
SHA512
d0b6e03794ec2b77ed3ef1688951dfa2c5edf0a3cff148a024c1c0e31fac54514cb692224259ca8e42316c148fef9d60e97ef42813cd7e819c9cd38e5b8f3a97
-
SSDEEP
6144:LtMuqWASxQ0rShyGlReFjbjfhyqQMRYNYoDvohAi3lFe/qxzSiUY:G/WDQcShyGloFjbTA1KmNo/VFcqx26
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8eece73e5adac22e36650c9e69521815_JaffaCakes118
Files
-
8eece73e5adac22e36650c9e69521815_JaffaCakes118.exe windows:4 windows x86 arch:x86
9c88e9bbe61f5ed94da27c71c322c8e4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
OpenMutexA
FreeConsole
GetACP
FreeEnvironmentStringsA
CreateEventA
lstrlenA
GlobalLock
IsBadReadPtr
GlobalUnlock
VirtualProtectEx
LocalFree
GetStdHandle
FindClose
CloseHandle
GetSystemTime
OpenSemaphoreA
GetModuleHandleA
ResumeThread
LoadLibraryExA
user32
SetFocus
GetSubMenu
ClipCursor
GetComboBoxInfo
CreateWindowExA
IsMenu
GetMessageA
EndDialog
GetMessageA
IsIconic
DialogBoxParamA
GetDlgItemTextA
LoadCursorA
MessageBoxA
msasn1
ASN1BEREncNull
ASN1BERDecBool
ASN1DecAlloc
ASN1BEREncOpenType
ASN1BERDecCheck
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ