Static task
static1
Behavioral task
behavioral1
Sample
a388796eabfb1863a545b070acdcb8fb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a388796eabfb1863a545b070acdcb8fb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a388796eabfb1863a545b070acdcb8fb_JaffaCakes118
-
Size
55KB
-
MD5
a388796eabfb1863a545b070acdcb8fb
-
SHA1
31f6f6440236d50bc8cd1397c41965d430c75c91
-
SHA256
ef995ac4f369c35c6533eafadeacd59690f9e33f64357ed0d802e6bc9580ff5b
-
SHA512
0e2a8ad73d102116283b5358ef297ef1d56468342f52c24febfd94c552e63e87329b4b097d583e9346bd927621f0c93c851f9da7fe11876557eb0f5a838f2d5e
-
SSDEEP
768:9ma+6DXIFgcfHQf8TGYxHb05nMkUw9W9mJxGbpWUJOX9tAq5Kvev9hWRnC:96AXIFLeFYlbBkNgmJ9UQT5KgWRnC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a388796eabfb1863a545b070acdcb8fb_JaffaCakes118
Files
-
a388796eabfb1863a545b070acdcb8fb_JaffaCakes118.exe windows:3 windows x86 arch:x86
50fa551fe92219cd3574ed4c2a8dc7cb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventA
DeleteCriticalSection
DisableThreadLibraryCalls
FreeLibrary
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetSystemTimeAsFileTime
HeapDestroy
InterlockedExchange
LoadLibraryA
LocalAlloc
MultiByteToWideChar
QueryPerformanceCounter
Sleep
user32
BeginPaint
DestroyWindow
DialogBoxParamA
GetCapture
GetClientRect
GetDlgItem
GetKeyboardType
GetParent
InvalidateRect
IsChild
IsIconic
IsWindow
LoadCursorA
MessageBoxA
SendMessageA
ShowWindow
Sections
CODE Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
BSS Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ