Static task
static1
Behavioral task
behavioral1
Sample
96d68d446c4c8b8f1383beb14503183f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
96d68d446c4c8b8f1383beb14503183f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
96d68d446c4c8b8f1383beb14503183f_JaffaCakes118
-
Size
365KB
-
MD5
96d68d446c4c8b8f1383beb14503183f
-
SHA1
164877f1050d231d605674c99172c1d0cc8c7388
-
SHA256
968b30a344013f00f1c97b4cf779b8118c12b856f796086e1709a06a0df989a7
-
SHA512
7ff2fdf45e56fae1418ae454602f815cdf143dbae3e34fe4a496088b49ed5d074bdc43799ec304924cee24481333e983252383b773d723350fb28735482809c5
-
SSDEEP
6144:oNzRMca4hib4j8jf51Qx7O6bcLehsEwkoK/6ERdFQJdlMu6lb/01apjbV6m8lL:ERM7x4ojf51aTcK0NEQUd0op3QlL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96d68d446c4c8b8f1383beb14503183f_JaffaCakes118
Files
-
96d68d446c4c8b8f1383beb14503183f_JaffaCakes118.exe windows:4 windows x86 arch:x86
4a2d47b2ecc5b3ae4f9e2b8f3d534ba8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResumeThread
GetFileAttributesA
CreateMailslotA
GetCurrentProcessId
GetDriveTypeW
FindClose
SetLastError
GetModuleHandleA
SetEvent
HeapCreate
GetModuleFileNameA
LocalFree
EnumCalendarInfoW
GetPrivateProfileStringW
GlobalFree
GetCurrentThreadId
ReadFile
GetConsoleAliasW
EnterCriticalSection
FindAtomW
user32
GetMenuInfo
GetClassInfoA
CallWindowProcW
GetSysColor
DispatchMessageA
GetKeyState
GetKeyboardType
DispatchMessageA
DrawTextW
GetClientRect
GetCursorInfo
IsWindow
SetFocus
asycfilt
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
msasn1
ASN1BERDecBool
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 355KB - Virtual size: 354KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ