Static task
static1
Behavioral task
behavioral1
Sample
a474a95e87d53c6d31bb76d1a545d369_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a474a95e87d53c6d31bb76d1a545d369_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a474a95e87d53c6d31bb76d1a545d369_JaffaCakes118
-
Size
317KB
-
MD5
a474a95e87d53c6d31bb76d1a545d369
-
SHA1
60209b66b77ef64923e0b244a0517e898654771a
-
SHA256
93057857b640e716965d4afacdc055dd2ebeb23b67ab886c0225585fe04ad905
-
SHA512
d2e174118fc7bd6be58b7b559ea09024805304b2f76d34030cdf631caafb480a631b284557ca8bc535d49ccba60ba9bd27b40f381c7ae4a491d419b65e50fd8f
-
SSDEEP
6144:vU1leC/4nXA13lwjbjHMGcnr6hDLCF1bzzFD5BrOSMInBOwUsD1N:vUInX5Hrlcnr6hDLstzzYSMaBOwUsRN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a474a95e87d53c6d31bb76d1a545d369_JaffaCakes118
Files
-
a474a95e87d53c6d31bb76d1a545d369_JaffaCakes118.exe windows:4 windows x86 arch:x86
c444c9fd5a1fe0ec4a0400b3cbd5a52f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAddAtomA
GetStdHandle
RaiseException
LocalFree
lstrcpyA
CloseHandle
EnterCriticalSection
SetConsolePalette
FreeConsole
LoadLibraryExA
GlobalFree
GetLastError
GlobalUnlock
GlobalAddAtomA
IsBadCodePtr
DeleteAtom
WriteProfileStringA
LoadResource
HeapCreate
VirtualProtect
GetACP
user32
GetFocus
ValidateRect
GetClassNameA
ReleaseDC
GetParent
ShowWindow
GetActiveWindow
GetWindowTextLengthA
EndPaint
BeginPaint
GetClassInfoExA
CloseWindow
AlignRects
GetWindow
GetDC
GetWindowTextA
GetForegroundWindow
IsIconic
DrawEdge
mprapi
MprAdminUserRead
MprAdminUserOpen
MprAdminUserWrite
MprAdminUserClose
MprAdminUserGetInfo
linkinfo
CreateLinkInfoA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ