_TOaSY@12
Static task
static1
Behavioral task
behavioral1
Sample
96655df4a14bb4856e8ff32231509d0a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
96655df4a14bb4856e8ff32231509d0a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
96655df4a14bb4856e8ff32231509d0a_JaffaCakes118
-
Size
132KB
-
MD5
96655df4a14bb4856e8ff32231509d0a
-
SHA1
b59c8cd8cd78f53391a8060492dbdab9679eb88c
-
SHA256
99d9b05ad1136494416f7304f1576c978977178fb91ff4bcb4cd15ccae299420
-
SHA512
2cfeac2f40f6b9498422cdda47c5ea9cc4ba594ca4f7abfbe2b89e84db42ca0b85918d13c514552bc25690977508380a4c66ed84cbd6512f50d59021df7af4ed
-
SSDEEP
3072:dSMLmDXEQ6Ts1GHeMMNn2LMAqxEJjKF15X:IMLqEQaeMMZ2LMAq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96655df4a14bb4856e8ff32231509d0a_JaffaCakes118
Files
-
96655df4a14bb4856e8ff32231509d0a_JaffaCakes118.exe windows:4 windows x86 arch:x86
8fdb0a1e2c79e4ac5e7b24dcb5253b7e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsWindowEnabled
CharLowerBuffA
CharLowerA
CharNextA
CharNextW
GetMenu
GetDC
IsWindowUnicode
oleaut32
SafeArrayPtrOfIndex
RegisterTypeLib
OleLoadPicture
SafeArrayCreate
SafeArrayGetElement
SysAllocStringLen
VariantCopyInd
SafeArrayGetUBound
SysStringLen
comctl32
ImageList_Add
ImageList_GetBkColor
ImageList_Create
kernel32
IsBadHugeReadPtr
GetStartupInfoA
GetFileAttributesA
SizeofResource
RaiseException
SetLastError
VirtualAllocEx
GetProcAddress
GetUserDefaultLCID
GetDiskFreeSpaceA
GetModuleFileNameA
ExitProcess
CloseHandle
LockResource
GetACP
VirtualAlloc
DeleteFileA
LoadResource
GlobalAddAtomA
lstrlenA
LoadLibraryA
MoveFileExA
VirtualQuery
Exports
Exports
Sections
CODE Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 10KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.lkdata Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ