Static task
static1
Behavioral task
behavioral1
Sample
a47a401c3112a4cf0712217673759ac4_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a47a401c3112a4cf0712217673759ac4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a47a401c3112a4cf0712217673759ac4_JaffaCakes118
-
Size
363KB
-
MD5
a47a401c3112a4cf0712217673759ac4
-
SHA1
0af9b5f9b251535e6e280fec95836fb4562e4960
-
SHA256
28206bd6139b3042382882925241a5a457e4ed38c38e5254864318b39db99aac
-
SHA512
d46d0cd5b190724fa775c24165502d3b389d277706182b54f171f5750db001c62e589e0972a160627f90fa1c16f9829be299fd62985a07ec487174a7692c17fb
-
SSDEEP
6144:bRMMha4hib4j8jf51Qx7O6bcLehsEwkoK/6ERdFQJdlMu6lb/01apjbV6m8lL:bRMMQx4ojf51aTcK0NEQUd0op3QlL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a47a401c3112a4cf0712217673759ac4_JaffaCakes118
Files
-
a47a401c3112a4cf0712217673759ac4_JaffaCakes118.exe windows:4 windows x86 arch:x86
9ad69ffc90d01926e484fdf7a455471e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeW
EnumCalendarInfoW
HeapCreate
GlobalFree
ResumeThread
ReadFile
GetCurrentThreadId
GetPrivateProfileStringW
CreateMailslotA
GetCurrentProcessId
FindClose
FindAtomW
GetFileAttributesA
GetModuleHandleA
GetModuleFileNameA
LocalFree
SetLastError
EnterCriticalSection
GetConsoleAliasW
SetEvent
user32
DispatchMessageA
GetMenuInfo
DrawTextW
IsWindow
SetFocus
GetCursorInfo
GetSysColor
DispatchMessageA
GetKeyboardType
GetClientRect
GetKeyState
CallWindowProcW
GetClassInfoA
asycfilt
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
msasn1
ASN1BERDecBool
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 353KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ