Static task
static1
Behavioral task
behavioral1
Sample
a5b226a41c41978177a04d36350220d3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a5b226a41c41978177a04d36350220d3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a5b226a41c41978177a04d36350220d3_JaffaCakes118
-
Size
56KB
-
MD5
a5b226a41c41978177a04d36350220d3
-
SHA1
5374fa2cbd68643da78b7df8be89f0932df91bef
-
SHA256
e37f0fe88b467befda421ecadeb39ac7747c2be2e7c787aaf19778cfbd523c84
-
SHA512
afe42cf00dc7a828e606623fa32b6ba217f429723443ab0b91b993340cbb6df8818c3b6189a1dd20e421d4126f1a66220be1c625dd0c3abe6255a2e27318a9b8
-
SSDEEP
1536:bipbBMGSbj7JnTbOInljq75j0NN5dK2CrOzs:uMvdnTbvljMaN5dK2CCz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5b226a41c41978177a04d36350220d3_JaffaCakes118
Files
-
a5b226a41c41978177a04d36350220d3_JaffaCakes118.exe windows:4 windows x86 arch:x86
0cb7d19e77f3e9ca3ee3886e3e8eca29
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitThread
LoadLibraryA
GetLastError
GetCurrentProcess
VirtualAlloc
GetPriorityClass
CloseHandle
GetCommandLineA
GetCurrentThreadId
GetProcessHeap
ExitProcess
GetModuleFileNameA
GetStartupInfoA
GetThreadPriority
FreeLibrary
GetCurrentThread
GetProcessTimes
Sleep
GetModuleHandleA
GetCurrentProcessId
GetTickCount
user32
ShowWindow
CreateWindowExA
GetWindowDC
GetDC
GetWindow
BeginPaint
ReleaseDC
GetClassLongA
IsWindowVisible
UpdateWindow
GetWindowLongA
GetWindowTextLengthA
OpenIcon
GetSystemMetrics
GetForegroundWindow
GetActiveWindow
RegisterClassA
GetWindowTextA
GetFocus
advapi32
RegCloseKey
GetUserNameA
IsTextUnicode
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
version
VerQueryValueA
VerLanguageNameA
GetFileVersionInfoSizeA
GetFileVersionInfoA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ