Static task
static1
Behavioral task
behavioral1
Sample
969bc961e8e1da39336fb2a54383651f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
969bc961e8e1da39336fb2a54383651f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
969bc961e8e1da39336fb2a54383651f_JaffaCakes118
-
Size
19KB
-
MD5
969bc961e8e1da39336fb2a54383651f
-
SHA1
e2e7fc39085d9d2e16f3f5c4ec775cf15e71a902
-
SHA256
2dfa1dd6a43562635b4781de49bffa30f0aa1af0187a2288bf78fe353f8bd2c7
-
SHA512
648e0f2d84f168e978b9ddcb171db18f038ab3c94dff876a3b5b3254adc503a3b34e7db811acd008b39027d556932a1504d2b49ccfe88bd11af4bc7696e84bfa
-
SSDEEP
384:Sg270yTOtV3z/PAWHW7WNiDyXKQsyaUUVKbUXw:N270bZ3AWHV7l29A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 969bc961e8e1da39336fb2a54383651f_JaffaCakes118
Files
-
969bc961e8e1da39336fb2a54383651f_JaffaCakes118.exe windows:4 windows x86 arch:x86
59d843eb46b50ca9154760f6ee985d77
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapDestroy
ResumeThread
GetCommandLineA
GlobalMemoryStatus
InterlockedExchange
GetSystemDefaultLCID
GetACP
GetSystemTime
IsDebuggerPresent
WaitForSingleObject
GetTapeStatus
GetModuleHandleA
GetTimeFormatA
HeapCreate
GlobalSize
PeekConsoleInputA
VirtualProtect
LoadLibraryA
GetCurrentProcessId
FreeConsole
GetOEMCP
user32
GetDC
GetWindow
BeginPaint
GetTitleBarInfo
DrawTextA
ReleaseDC
SetForegroundWindow
ShowWindow
FillRect
wsprintfA
FrameRect
EndPaint
GetFocus
AnyPopup
GetClassNameA
GetCursorPos
DragDetect
GetParent
CreateIcon
atl
AtlAdvise
AtlModuleTerm
AtlGetVersion
AtlUnadvise
AtlModuleInit
msutb
GetPopupTipbar
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 840KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ