Static task
static1
Behavioral task
behavioral1
Sample
a8554ec152e31c8560d6967c8fa28726_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a8554ec152e31c8560d6967c8fa28726_JaffaCakes118
-
Size
417KB
-
MD5
a8554ec152e31c8560d6967c8fa28726
-
SHA1
9c14b90945713c8f83c0275e10b46cfcd7dc6530
-
SHA256
480f856eb5f19f83ee4f51f8c5e3bca471640a819e0e92e7212603ede76a51f7
-
SHA512
dbbd9374a263c05bb6ca65bbc0280e54818cf751b7f438ef9873f16f0c18a9a61326bd7f92a9259edd9ec46d410f9b2e1ad1ae8b228965c5173976b24a1c6a01
-
SSDEEP
6144:T4f5pjA6EstDkoCDuG6K4nY+zIZJz5GyCY6ootoA4t/T4RgU:WA6ESDkoUuBfqR50YPot3e/Tg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8554ec152e31c8560d6967c8fa28726_JaffaCakes118
Files
-
a8554ec152e31c8560d6967c8fa28726_JaffaCakes118.exe windows:4 windows x86 arch:x86
28377db4b452af1ed9fe2c033423fd09
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
GlobalFree
GlobalFindAtomA
GetOEMCP
DeleteAtom
GetCommState
LoadLibraryExA
LoadResource
GlobalAddAtomA
GlobalCompact
GetProfileStringA
GlobalLock
VirtualAlloc
ExitThread
RaiseException
CloseHandle
LocalSize
GetProcessHeap
GetStdHandle
lstrcpyn
SetCommBreak
user32
CloseWindow
GetParent
GetClassInfoExA
IsIconic
GetWindow
BeginPaint
GetClassNameA
GetForegroundWindow
GetWindowTextA
GetActiveWindow
ValidateRect
ShowWindow
GetWindowTextLengthA
AlignRects
GetFocus
ReleaseDC
EndPaint
GetDC
DrawEdge
wsock32
WSAStartup
WSAAsyncGetServByPort
WSASetBlockingHook
WSAGetLastError
WSACleanup
duser
AutoTrace
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ