Static task
static1
Behavioral task
behavioral1
Sample
a52b84d3e62752b98b431685818f0cc4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a52b84d3e62752b98b431685818f0cc4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a52b84d3e62752b98b431685818f0cc4_JaffaCakes118
-
Size
83KB
-
MD5
a52b84d3e62752b98b431685818f0cc4
-
SHA1
6e91b56bbd6f85f9d058e346a4bd24e24da8eb7b
-
SHA256
3a499fc6fa90d54af1cb0512fa1a9394ab5ff863d3dcaceefaf0d27a36868d8f
-
SHA512
198024bb267baa1d5616758283b2da4685ea2ebe434f3deb6faf6baa6f2cb8741416097151e61d8911ea282ad58bb2bc7c2b9668de06a48a43c0d97c199549e0
-
SSDEEP
1536:j+UhitlLHnAd2PsZz8vgiq/wbpImx3tvNnej50qzno2L+JjAo:j+JHA5IvgFKKmptvNeNTzo2AjAo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a52b84d3e62752b98b431685818f0cc4_JaffaCakes118
Files
-
a52b84d3e62752b98b431685818f0cc4_JaffaCakes118.exe windows:4 windows x86 arch:x86
9b5efe209e295d057e68ce22bf87adcd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetVersion
LockResource
CloseHandle
GetFileSize
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetModuleHandleA
GetCPInfo
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
DeviceIoControl
FindResourceW
LoadResource
GetACP
GetCurrentProcess
TerminateProcess
ExitProcess
GetCommandLineA
GetStartupInfoA
GetStringTypeW
user32
EndPaint
BeginPaint
DestroyWindow
GetClientRect
GetSystemMetrics
EndDialog
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
LoadIconA
LoadCursorA
LoadIconW
RegisterClassExA
DrawTextA
CreateWindowExA
ShowWindow
UpdateWindow
LoadStringA
DefWindowProcA
FindWindowA
MessageBoxA
DialogBoxParamA
gdi32
TextOutA
CreateBitmap
Rectangle
ole32
CoTaskMemAlloc
CoInitialize
CoUninitialize
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.CODEA Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.CODEB Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ