Static task
static1
Behavioral task
behavioral1
Sample
9527b5cec86b296223553ecac0e51689_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9527b5cec86b296223553ecac0e51689_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9527b5cec86b296223553ecac0e51689_JaffaCakes118
-
Size
282KB
-
MD5
9527b5cec86b296223553ecac0e51689
-
SHA1
986dbc9829a33e5873ad5330532f3e8ed6928134
-
SHA256
f18696f9e46737acace9b1dee90467dfad53e47475add828d9cd344af5c525d1
-
SHA512
7a4d747871de873dffa8ac555fc2b8df6e97b6f9dca4596833d611f15bf679f9c82c5504e6b1ac9b39c39552b5a6cb2a9989af3e358c1ba5a739119fb8c907dc
-
SSDEEP
6144:iKiLjpQkwAloP70cp6F//b9fWUFFzjOEXTO9+bfli:8nppjCP776hT0UDjOb+5i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9527b5cec86b296223553ecac0e51689_JaffaCakes118
Files
-
9527b5cec86b296223553ecac0e51689_JaffaCakes118.exe windows:4 windows x86 arch:x86
8aae8dc2a724c7a8d83a9ddebded5620
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
GetModuleHandleA
LoadLibraryW
FindAtomA
TlsFree
GetACP
CloseHandle
GetTickCount
SetEvent
CreateThread
VirtualProtect
InterlockedExchange
GlobalUnlock
GetVersion
ExitProcess
PulseEvent
GetAtomNameA
lstrlenA
WriteConsoleA
HeapReAlloc
GetConsoleCP
user32
SetWindowPos
GetMenuStringA
PostQuitMessage
GetSubMenu
MessageBoxA
GetWindowTextA
GetParent
PostMessageA
DialogBoxParamA
UpdateWindow
DispatchMessageA
GetWindowLongA
GetMenu
CopyRect
ModifyMenuA
EnableScrollBar
GetDlgItem
InsertMenuA
SetPropA
ShowWindow
SetSysColors
LoadIconA
GetScrollRange
ScrollDC
EqualRect
InflateRect
GetKeyboardLayout
DestroyMenu
TranslateMessage
shlwapi
StrToIntExA
StrTrimA
StrToIntA
UrlHashA
UrlCombineA
version
GetFileVersionInfoA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 640KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ