Static task
static1
Behavioral task
behavioral1
Sample
a416549a0681ad340cdc302e2a5940fe_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a416549a0681ad340cdc302e2a5940fe_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a416549a0681ad340cdc302e2a5940fe_JaffaCakes118
-
Size
400KB
-
MD5
a416549a0681ad340cdc302e2a5940fe
-
SHA1
3be9a867b90bb8642dfff636646a45ec36a92d6f
-
SHA256
6b429aa316ca5f5593380bb29d02912e0e5370573b625e15f7af9288693d90b5
-
SHA512
668bb5b1063c41b3cf83a5789145cadeb6854b7f2f006aa8ae164489d2dd343d117714ca09d990d08cc276aac7d74a3e23bb0486f055e731c82ad18f9353ad7f
-
SSDEEP
12288:4cmYFatCSTkJcVLYXkfvM8Udc4n+ln2qX:4cUsSgJm2p8F4n+J7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a416549a0681ad340cdc302e2a5940fe_JaffaCakes118
Files
-
a416549a0681ad340cdc302e2a5940fe_JaffaCakes118.exe windows:5 windows x86 arch:x86
8b62e83cbe6134f51ec2467c4beeab48
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
RaiseException
QueryDepthSList
LZCopy
GetCurrentThreadId
SetThreadPriority
GetCurrentThread
GetThreadPriority
Sleep
WaitForMultipleObjects
TryEnterCriticalSection
OpenEventW
ReleaseMutex
OpenMutexW
CreateMutexW
UnmapViewOfFile
MapViewOfFile
OpenFileMappingW
CreateFileMappingW
ExitProcess
user32
PostMessageA
UpdateWindow
SendMessageA
LoadCursorA
SetCursor
odbc32
SQLGetTypeInfoW
Sections
.text Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 772B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 135KB - Virtual size: 451KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ