Static task
static1
Behavioral task
behavioral1
Sample
968a54abe1672825912a03dc15ce0e8e_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
968a54abe1672825912a03dc15ce0e8e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
968a54abe1672825912a03dc15ce0e8e_JaffaCakes118
-
Size
261KB
-
MD5
968a54abe1672825912a03dc15ce0e8e
-
SHA1
d7860e73c39ada4ccca84aeb05a7cc4f6d634c16
-
SHA256
17d3560d842142960fd1cfe50f307a26d1f4d624532543f1830f3ca6caab99dd
-
SHA512
47c0f4aa2d6b3f06bd4dd6c95c23290c50e45f571fe2cf35b76963ad9ba091d0f63c7399abc0f8aae17c1124d0663417e64887c5d927948ab39a07f39eae2159
-
SSDEEP
6144:jBRMr9RVhJVZRZ5i4XmdzC25PpOAJboB64H:jBCtTmFCExFpK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 968a54abe1672825912a03dc15ce0e8e_JaffaCakes118
Files
-
968a54abe1672825912a03dc15ce0e8e_JaffaCakes118.exe windows:4 windows x86 arch:x86
bec65bd76c633a3a090fe4b62a79b532
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CompareStringA
CreateIoCompletionPort
CreateThread
DeleteFileA
EnterCriticalSection
FindFirstFileA
FormatMessageA
GetCurrentThreadId
GetFileSize
GetTickCount
GlobalAlloc
IsBadCodePtr
LoadLibraryA
LocalReAlloc
MapViewOfFile
MoveFileW
MulDiv
RaiseException
ReadFile
Sleep
WaitForSingleObject
WriteConsoleA
lstrcmpiA
lstrlenA
user32
BeginPaint
FindWindowA
GetClientRect
GetKeyState
IsDlgButtonChecked
IsRectEmpty
PtInRect
RedrawWindow
RemoveMenu
RemovePropW
SendMessageW
SetMenuItemInfoW
SetWindowTextW
TileWindows
TrackPopupMenuEx
TranslateAcceleratorW
Sections
.text Size: 253KB - Virtual size: 253KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ