Static task
static1
Behavioral task
behavioral1
Sample
a56159ffe1d36747b819f40140e8c73f_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a56159ffe1d36747b819f40140e8c73f_JaffaCakes118
-
Size
92KB
-
MD5
a56159ffe1d36747b819f40140e8c73f
-
SHA1
28aa39fbd7f0d7242f44ef2caef2a3b72d1a18d5
-
SHA256
5f6e847301e2eafe5e8dc21be48f8ea4b932f4233eeb10ff25fdcf114cb8ef4e
-
SHA512
30f2ddfe7d6322f5afcd3d3339ea0572a344aa1987f109229728855eef6233381f353585c3017ed9b9d6ab0d2b48c10efef3b3ec2c080f7b23bd847f4b669ccf
-
SSDEEP
1536:AfEtX9D8sMMOPAoKu/aY14LxMQLXRT4szvurzM9CEro:AcJ90pPAoK6XG9csLKMI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a56159ffe1d36747b819f40140e8c73f_JaffaCakes118
Files
-
a56159ffe1d36747b819f40140e8c73f_JaffaCakes118.exe windows:4 windows x86 arch:x86
c6c8f9a2cdd71e1c6c79ef1d131b23b6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
CreateProcessA
HeapCreate
GetCurrentDirectoryA
SetLastError
FindResourceW
LocalFree
CreateFileW
UnmapViewOfFile
GetComputerNameA
GetModuleHandleA
Sleep
CloseHandle
lstrcpyA
GetCurrentThreadId
GlobalUnlock
lstrlenA
LoadLibraryExW
FindClose
PulseEvent
user32
IsWindow
GetDlgItem
DrawEdge
GetDC
FillRect
GetCaretPos
CreateWindowExA
CallWindowProcA
CheckRadioButton
SetFocus
DispatchMessageA
DrawMenuBar
CreateIcon
rsaenh
CPGenKey
CPDecrypt
CPSignHash
CPHashData
CPDeriveKey
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vooihtv Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE