Static task
static1
Behavioral task
behavioral1
Sample
a593004b83021528bbbd078604659e58_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a593004b83021528bbbd078604659e58_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a593004b83021528bbbd078604659e58_JaffaCakes118
-
Size
3.7MB
-
MD5
a593004b83021528bbbd078604659e58
-
SHA1
88addbea0ec223a21c4373d4c8a793198d6e19ba
-
SHA256
2588666c97ffee493709bcb76947da01ecdcf61de14144b4314cdfa71000d3e7
-
SHA512
248b67076f3e23dded560269a365a0fac48995c66ce3666f5d421c61be21dfdfc3445b260793dcfaf74bff6ce52a075cdd56581ccdd35e336a04b8f52bfb7175
-
SSDEEP
98304:+8L3u0VRPoCqd4L4GgugMDXgDZFuuNF8DU18OaVVPf:+8L+0VRPoCqd4L+fuXgDkek3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a593004b83021528bbbd078604659e58_JaffaCakes118
Files
-
a593004b83021528bbbd078604659e58_JaffaCakes118.exe windows:4 windows x86 arch:x86
4900b5ff68e4221b3f3c1636fb5ee312
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
IsDBCSLeadByteEx
TryEnterCriticalSection
MoveFileExA
GetAtomNameA
FindNextChangeNotification
SizeofResource
GenerateConsoleCtrlEvent
VirtualFree
SetFileTime
GetCommandLineW
SetConsoleCursorPosition
FindResourceExA
GetProcessHeap
ExitProcess
GetStartupInfoA
SetLastError
MultiByteToWideChar
EnumSystemCodePagesA
GetModuleHandleA
IsBadStringPtrA
GetShortPathNameA
GetPrivateProfileStringW
RemoveDirectoryA
comctl32
PropertySheetA
user32
DestroyCursor
SendNotifyMessageA
PostQuitMessage
GetParent
IsCharLowerA
GrayStringA
GetMenuDefaultItem
SetThreadDesktop
BroadcastSystemMessageA
CreatePopupMenu
LoadCursorA
GetWindowTextLengthW
CheckMenuRadioItem
GetMenu
DestroyWindow
CreateWindowExA
InternalGetWindowText
gdi32
SetBkColor
TextOutW
GetTextCharset
GetCurrentPositionEx
advapi32
InitializeAcl
ObjectCloseAuditAlarmA
CryptGetKeyParam
GetSidSubAuthority
LookupPrivilegeValueA
ws2_32
WSASendDisconnect
WSAGetLastError
getprotobyname
getsockname
gethostbyaddr
closesocket
Sections
.text Size: 2KB - Virtual size: 221KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ