Static task
static1
Behavioral task
behavioral1
Sample
a7b5e30e797c45fadfa0d2ed8dd49af5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a7b5e30e797c45fadfa0d2ed8dd49af5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a7b5e30e797c45fadfa0d2ed8dd49af5_JaffaCakes118
-
Size
228KB
-
MD5
a7b5e30e797c45fadfa0d2ed8dd49af5
-
SHA1
40efd33f1019a82f5490a0e8bc637c1f72077326
-
SHA256
c8376b0b23470542efa4092df9314c3337291a9cf0e2f92a6aaecce4b5d0e1ad
-
SHA512
0019b2ae789da96a4823d367d0d38fbe69681417ceb2fafa70dc5c2aa50b59060fcc88e1884067288c9152de437799ebd488b178dd9f5df033f5e6eddce5b9b0
-
SSDEEP
3072:b31JIxHGpm8vW0etm6XqaGqfBCZHjdbDRhq7EV41fOcrGfXysFBk695+5R:blK0eAaG6CZHhb1xVaGfXbkt5R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7b5e30e797c45fadfa0d2ed8dd49af5_JaffaCakes118
Files
-
a7b5e30e797c45fadfa0d2ed8dd49af5_JaffaCakes118.exe windows:4 windows x86 arch:x86
a7d194a835fd08b41d018bfc04345917
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
CancelDeviceWakeupRequest
DuplicateHandle
EnumDateFormatsExW
EnumResourceLanguagesA
ExitProcess
FindNextFileW
FoldStringA
GetCurrentProcess
GetFileTime
GetThreadPriority
GetVersionExW
GetVolumeInformationA
IsBadWritePtr
LocalAlloc
ReleaseSemaphore
SetConsoleCursorPosition
SystemTimeToTzSpecificLocalTime
UTRegister
WaitForDebugEvent
WriteProcessMemory
user32
BeginPaint
CascadeChildWindows
ChangeDisplaySettingsA
CreateWindowStationW
DefFrameProcA
DestroyAcceleratorTable
DialogBoxParamA
EnableWindow
FrameRect
GetClassLongW
GetClassNameW
GetClipboardOwner
GetInternalWindowPos
GetListBoxInfo
LookupIconIdFromDirectoryEx
MapVirtualKeyExW
PostMessageW
RegisterLogonProcess
SendDlgItemMessageA
SetDoubleClickTime
SetMessageQueue
SetSysColors
gdi32
CreateMetaFileW
Ellipse
EnumICMProfilesA
EqualRgn
FlattenPath
GdiComment
GdiFlush
GdiSetBatchLimit
GetBitmapDimensionEx
GetClipRgn
GetMetaFileBitsEx
GetOutlineTextMetricsW
GetTextAlign
GetTextMetricsA
OffsetClipRgn
Polygon
RealizePalette
ResetDCA
ScaleViewportExtEx
SelectPalette
SetBkColor
SetColorSpace
SetGraphicsMode
SetICMProfileA
SetMetaFileBitsEx
SetPixelFormat
SetPixelV
SetWindowExtEx
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 225KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ