Static task
static1
Behavioral task
behavioral1
Sample
a8094b43c2821382226e36323bf3315a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a8094b43c2821382226e36323bf3315a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a8094b43c2821382226e36323bf3315a_JaffaCakes118
-
Size
18KB
-
MD5
a8094b43c2821382226e36323bf3315a
-
SHA1
f9fdf051245e3b3d1551e61ef720a51e217322ab
-
SHA256
390942d61d8534a69535608ff493fc0e7feafad9e48fdf11b57c454a92a5c04d
-
SHA512
b600bf657d1dc1a7f8181d742c6f04fabc60213d2f9a3e317f3bf568ba3dd9c460dd7f5e6eac88e8320a34d99ed08978658ae64fb2a5f2307cd964bec6717e71
-
SSDEEP
192:u0G4F3dXm4GHESYC53YA92FLgRTDpGT4y1YxwTpKIdU3rOvWt6m66h6EfJ:uZ0m4GHT53GxgEv1DTerRtR66DR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8094b43c2821382226e36323bf3315a_JaffaCakes118
Files
-
a8094b43c2821382226e36323bf3315a_JaffaCakes118.exe windows:4 windows x86 arch:x86
3ebbdaa071e771131ed2d5bd6b815228
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetThreadPriority
CreateFileMappingA
GetCommConfig
IsDebuggerPresent
GetStdHandle
HeapCreate
HeapDestroy
GetACP
GetModuleHandleA
GetEnvironmentStringsA
GetCurrentThread
GetLogicalDrives
InterlockedExchange
VirtualProtect
CreateThread
CreateHardLinkA
GetTimeFormatA
GetCurrentProcessId
LoadLibraryExA
GetCurrentProcess
DeleteAtom
user32
GetWindow
GetClassNameA
FillRect
GetWindowTextLengthA
BeginPaint
SetForegroundWindow
GetParent
GetFocus
SetActiveWindow
ReleaseDC
ShowWindow
DrawTextA
GetDlgItem
GetCursorPos
DragDetect
GetTitleBarInfo
FrameRect
EndPaint
wsprintfA
advapi32
RegEnumKeyA
RegQueryInfoKeyA
RegCloseKey
RegCreateKeyA
RegFlushKey
clbcatq
CoRegCleanup
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ