Static task
static1
Behavioral task
behavioral1
Sample
95770c41a07e8d329fb14569ec0e0260_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
95770c41a07e8d329fb14569ec0e0260_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
95770c41a07e8d329fb14569ec0e0260_JaffaCakes118
-
Size
241KB
-
MD5
95770c41a07e8d329fb14569ec0e0260
-
SHA1
a9efc648834f2edf214be2788c89cd0280f0c2aa
-
SHA256
a121f3ec69bb0788a94c4bafbd83c62127f17541b991d0c55ec553ab02ce10ec
-
SHA512
ce8e3575c35a0b26743d50380001f9b37ffacb574e78ac916198b63674ba2da9999440f8dce418946933ad0aa2380c6cd04028768e5825defea12d027c117ece
-
SSDEEP
6144:bM4Jg5oOGNYjTReDWJ3+JVtztzJL8/3sithMgdHuvDGy7AD:bLb6eDWJ3+JztzhYthTd2GVD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95770c41a07e8d329fb14569ec0e0260_JaffaCakes118
Files
-
95770c41a07e8d329fb14569ec0e0260_JaffaCakes118.exe windows:4 windows x86 arch:x86
2ec2d4419520ca057beee49241e05e8d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FoldStringA
SetErrorMode
CloseHandle
GlobalDeleteAtom
GetLastError
Sleep
GetLocaleInfoA
GetACP
GlobalAddAtomA
RaiseException
GlobalFree
LockResource
LoadLibraryExA
GetDriveTypeA
EnterCriticalSection
GetStdHandle
InterlockedExchange
HeapCreate
GlobalUnlock
SetConsoleCP
VirtualProtect
user32
GetClassNameA
ReleaseDC
GetCursorPos
DrawEdge
BeginPaint
GetMenuItemInfoA
ClipCursor
GetFocus
EndPaint
GetActiveWindow
SetForegroundWindow
GetWindow
IsIconic
ShowWindow
DrawTextA
ValidateRect
GetWindowTextA
CharToOemA
GetParent
version
VerLanguageNameA
VerFindFileA
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
rasadhlp
WSAttemptAutodialName
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 596KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ