Static task
static1
Behavioral task
behavioral1
Sample
a71b552426a0275ddfee6693773b2592_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a71b552426a0275ddfee6693773b2592_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a71b552426a0275ddfee6693773b2592_JaffaCakes118
-
Size
22KB
-
MD5
a71b552426a0275ddfee6693773b2592
-
SHA1
84e84f80778c91824a1922c1d1ecc02df6fe241d
-
SHA256
5b14aa2c7829f733f6216fed7604e850604219efab25158a7ef5d4c3762e07d4
-
SHA512
39977102f6549cabf00a365dd23d1c041dcf3f9e97320cb7eb54b31c26be0ad7bcb61e2c273fe24cb3c97df35e01d0b2832726440799a63006f15ee5dcddb1fe
-
SSDEEP
192:8Tmsq11Qpz7WxbaNxKOZfNwVZgDNj+H8KSQXpagNwDS0ov80LtkYx0rUd:MeEz5/KOZ1uZSONwu0oxtHxGU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a71b552426a0275ddfee6693773b2592_JaffaCakes118
Files
-
a71b552426a0275ddfee6693773b2592_JaffaCakes118.exe windows:1723 windows x86 arch:x86
2d29d9b87d34d823dff455b183576185
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsIconic
GetDlgCtrlID
SystemParametersInfoW
SetWindowTextW
SetCapture
GetWindow
CheckDlgButton
MessageBeep
CreateDialogParamW
KillTimer
WinHelpW
gdi32
BitBlt
CreateCompatibleDC
CreateBitmap
DeleteDC
CreateCompatibleDC
GetDeviceCaps
CreateSolidBrush
LineTo
GetObjectW
SetTextColor
SetTextColor
advapi32
RegSetValueExA
RegDeleteValueW
RegQueryInfoKeyW
RegOpenKeyExA
RegCreateKeyExW
RegEnumValueW
RegSetValueExW
GetTokenInformation
InitializeAcl
RegDeleteValueW
kernel32
VirtualAlloc
VirtualFree
LoadLibraryA
WideCharToMultiByte
LoadLibraryA
LocalFree
GetCommandLineW
DeleteCriticalSection
GetModuleHandleA
ExitProcess
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ