Static task
static1
Behavioral task
behavioral1
Sample
a740ff5bca4c4c2096eb577653bdea5b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a740ff5bca4c4c2096eb577653bdea5b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a740ff5bca4c4c2096eb577653bdea5b_JaffaCakes118
-
Size
368KB
-
MD5
a740ff5bca4c4c2096eb577653bdea5b
-
SHA1
0206d3ad306988bc8020141d8b0812c8c116afcf
-
SHA256
67c5741a85a2c2e15f91e3d354be999f26ce63408e22673276ccf52603551df1
-
SHA512
4eba1889adfac7852a8398af38647515be16f176085696e0c7c634a93129def02f38dd72a0e773b6fa4d0ea98d5cecf2e642d331784b8160a36cc68e962531c9
-
SSDEEP
6144:lRRMfhrVf/DRauRHlwrFYaN5ino7241GtMqzIXPH8CV+mybPzKP3zUeXm9+r:lRRMJrpDneFNzino7IUHybPzQjUeX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a740ff5bca4c4c2096eb577653bdea5b_JaffaCakes118
Files
-
a740ff5bca4c4c2096eb577653bdea5b_JaffaCakes118.exe windows:4 windows x86 arch:x86
d30ddb78da7f128c68e50c87b729ac97
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeW
GetPrivateProfileStringA
GetConsoleAliasA
EnumCalendarInfoA
ReadFile
GetCurrentProcessId
SetLastError
GetNumberFormatW
FindClose
GetModuleHandleA
CreateEventW
FindAtomW
LocalFree
GetCurrentThreadId
HeapCreate
ResumeThread
EnterCriticalSection
SetEvent
TlsGetValue
lstrlenW
user32
GetKeyboardType
GetMenuInfo
GetClientRect
GetClassInfoA
DispatchMessageA
SetFocus
DrawTextA
CallWindowProcW
GetSysColor
GetKeyState
GetCursorInfo
DispatchMessageA
IsWindow
tspkg
SpLsaModeInitialize
SpLsaModeInitialize
SpLsaModeInitialize
SpLsaModeInitialize
SpLsaModeInitialize
dsprop
CheckADsError
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 358KB - Virtual size: 357KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ