Static task
static1
Behavioral task
behavioral1
Sample
a4432dce2188b4ce1ab096aaf3ca5642_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a4432dce2188b4ce1ab096aaf3ca5642_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a4432dce2188b4ce1ab096aaf3ca5642_JaffaCakes118
-
Size
201KB
-
MD5
a4432dce2188b4ce1ab096aaf3ca5642
-
SHA1
aca972199348b79f4ce49d4881e72b17d131f52a
-
SHA256
e8e94be11df1220b5f372080f5133a07e3ddbf097825623a4b47ec484b0f8c1a
-
SHA512
00e062904723b043436a37c4e6163073cc785337ebbbda6f02205ab149397f28a990acb261a0c56d2841ad076b01afd38216c1b4890c2db7e2d92dd0ab38983f
-
SSDEEP
3072:9oII5+V0ovXfsGskRUJupzg79zJc1uF8XTCXXsJgIL0fdxy9K6JrcRlQciTokoPt:9o8tXfsGyuI4gF8ccJgvfy03fNbPZD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a4432dce2188b4ce1ab096aaf3ca5642_JaffaCakes118
Files
-
a4432dce2188b4ce1ab096aaf3ca5642_JaffaCakes118.exe windows:4 windows x86 arch:x86
8765a43c66d3c39da79197b0c7555321
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetTapePosition
InterlockedExchange
ClearCommError
Sleep
GetLocalTime
GetWindowsDirectoryA
EnumResourceNamesA
GetVersion
FatalExit
FindClose
GetCurrentProcessId
FindFirstFileA
ole32
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID
user32
IsWindow
SetWindowLongA
SetWindowPos
SetCursor
MoveWindow
GetWindowLongA
GetDC
GetDlgItem
ReleaseDC
FillRect
GetSysColor
GetWindowInfo
LoadCursorA
ReleaseCapture
SetCapture
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
winmm
mciSendCommandA
sndPlaySoundA
oleacc
LresultFromObject
CreateStdAccessibleObject
shell32
SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation
Sections
.text Size: 174KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lib Size: 512B - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ