Static task
static1
Behavioral task
behavioral1
Sample
a7d58d86e78e486b20ca92402b5507db_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a7d58d86e78e486b20ca92402b5507db_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a7d58d86e78e486b20ca92402b5507db_JaffaCakes118
-
Size
326KB
-
MD5
a7d58d86e78e486b20ca92402b5507db
-
SHA1
b99891d310fa7d5dcacf49083d299ca5da470fff
-
SHA256
370e6342b05a90e2d7d10df759a81734b271f579c3582c6c335fd482efd20fa3
-
SHA512
1fbb890d7ebfe205f281f5cc5ba6718aafba7b276f2074e3dc1c0370ca563853b71a0b71137d4a345e4d42e13902993b0c53088a6d868945707a25933889ebac
-
SSDEEP
6144:wqwD+X1xQatU+1CEJp4XEt8l3aw9Y6zfJvkeitTDYWMtrDVmCfNuI2RINhoDPnr:aO1xm+QoK0t4K3gCTDYWGrYzt+NST
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7d58d86e78e486b20ca92402b5507db_JaffaCakes118
Files
-
a7d58d86e78e486b20ca92402b5507db_JaffaCakes118.exe windows:4 windows x86 arch:x86
01dfd74755f0670e7325800ad13398e1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
GetTickCount
GetCommandLineW
FindVolumeClose
UnmapViewOfFile
LoadLibraryW
LocalUnlock
CloseHandle
HeapCreate
GetModuleHandleA
LocalFree
Sleep
lstrlenA
GetComputerNameA
CreateFileA
GetDateFormatA
GetDiskFreeSpaceA
ResetEvent
GetSystemTime
CreateThread
user32
GetDC
SetFocus
DrawMenuBar
DrawStateA
FillRect
CheckRadioButton
CallWindowProcA
IsWindow
GetComboBoxInfo
DispatchMessageA
DrawEdge
GetDlgItem
CreateWindowExA
advapi32
IsTokenUntrusted
FreeSid
RegDeleteKeyA
RegCloseKey
RegEnumValueA
sysdm.cpl
NoExecuteAddFileOptOutList
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 732KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ