Static task
static1
Behavioral task
behavioral1
Sample
acb8233026daa03fe6ffe14b5afad9f3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
acb8233026daa03fe6ffe14b5afad9f3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
acb8233026daa03fe6ffe14b5afad9f3_JaffaCakes118
-
Size
427KB
-
MD5
acb8233026daa03fe6ffe14b5afad9f3
-
SHA1
8d1bab5fd64613dc45de77a88bbf77ecc6b79cd5
-
SHA256
7d158f28ec8b1016b3370bce623ce4dfc90d1289614b43a429376768396e6250
-
SHA512
ceb0489c2f71f1022cb2d62674aabab8f447e34e916d38ce8ba51a54f1a0916d73d4c8c7574ba63679593c9895d33548d140812dc1a4213e018b9b3dafc5b922
-
SSDEEP
6144:vcwuO3NYDsNAdnQWMAN6l5yjiqXRZtWpfvxs5kiha0Al3EsRy2LaQt:vc7O3N50BMukyHgG51A5WQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource acb8233026daa03fe6ffe14b5afad9f3_JaffaCakes118
Files
-
acb8233026daa03fe6ffe14b5afad9f3_JaffaCakes118.exe windows:4 windows x86 arch:x86
212c402d7b48fafe6f125058e1537e4b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RaiseException
InterlockedExchange
FoldStringA
GlobalAddAtomA
GetStdHandle
GetDriveTypeA
GetLastError
CloseHandle
SetErrorMode
LockResource
GetACP
GetLocaleInfoA
GlobalFree
Sleep
VirtualProtect
GlobalUnlock
SetConsoleCP
GlobalDeleteAtom
LoadLibraryExA
HeapCreate
EnterCriticalSection
user32
BeginPaint
DrawEdge
ReleaseDC
GetMenuItemInfoA
DrawTextA
GetCursorPos
ClipCursor
SetForegroundWindow
GetWindowTextA
CharToOemBuffA
GetParent
GetFocus
GetWindow
GetClassNameA
GetActiveWindow
ShowWindow
EndPaint
ValidateRect
IsIconic
version
VerQueryValueA
VerInstallFileA
GetFileVersionInfoSizeA
VerFindFileA
GetFileVersionInfoA
rasadhlp
WSAttemptAutodialName
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 704KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ