Static task
static1
Behavioral task
behavioral1
Sample
a03d672606e1a215d0254172eb265f01_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
a03d672606e1a215d0254172eb265f01_JaffaCakes118
-
Size
413KB
-
MD5
a03d672606e1a215d0254172eb265f01
-
SHA1
34388ef6543c84ac752b24585522eda29fd6f1e3
-
SHA256
c2d3824bb087a587b54583c155374600a3b57295a94af70397811dc443e4acf9
-
SHA512
a99f4aca75c1a820b766f603a841151de2918f800c1f498690adbc08780c131c07a5f5ccd8ab8d5871db05061d61b335c14fa94b38d0e7bf5f99af7a5816366e
-
SSDEEP
6144:2cTRLFhpIY/houf4qLAdlwzsT8pdUNhcxckiWZe6YB3W2viZsSQ:jlxhikhoS4qL6iwTayNhcwaSBGZmS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a03d672606e1a215d0254172eb265f01_JaffaCakes118
Files
-
a03d672606e1a215d0254172eb265f01_JaffaCakes118.exe windows:4 windows x86 arch:x86
2c8e65b2693b2b1b59df73ef473d2ec5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateHardLinkA
EnterCriticalSection
GetProfileStringA
VirtualAlloc
FindAtomA
GetProcessHeap
ClearCommBreak
FormatMessageA
GetTapeStatus
GlobalFree
GetVolumePathNameA
ExitProcess
GetCommState
CloseHandle
GetUserDefaultLangID
GetStdHandle
GlobalLock
GetModuleHandleA
GetOEMCP
GlobalFlags
CreateJobSet
user32
ShowWindow
GetWindow
GetClassNameA
GetDC
BeginPaint
GetWindowTextA
DrawEdge
ReleaseDC
GetWindowTextLengthA
GetParent
GetFocus
GetClassInfoExA
GetActiveWindow
RegisterClassA
IsIconic
EndPaint
ValidateRect
CloseWindow
GetForegroundWindow
gdi32
GetColorSpace
CreateDCA
GetCharWidthA
ExtCreatePen
CreateDIBitmap
sxs
SxsLookupClrGuid
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ