Static task
static1
Behavioral task
behavioral1
Sample
a9128dbf9a176f01fc02196ccfd25c61_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a9128dbf9a176f01fc02196ccfd25c61_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a9128dbf9a176f01fc02196ccfd25c61_JaffaCakes118
-
Size
374KB
-
MD5
a9128dbf9a176f01fc02196ccfd25c61
-
SHA1
3d10b056f48bc2084dbb24ec2cff000015c85aea
-
SHA256
3550f0fcd3db1080ff3e2722178a7aff184755b6393802ec705d1c99a2a57e55
-
SHA512
eb6613facbdab1d8e6ce0dcb4ee86e251693c75557d6ebb12bec827898dec2b76a687dc0aa3a6dd084735adeb9d71fcd30aaa9503bbea7e80d312a9b9dfab1e2
-
SSDEEP
6144:YCtEbRMcnKP9EoxGcTYNh91DQJ7w6Mcx8MYeWKnEWYzXTz+VNypJOVglH5fDsf1D:FtQRMAL9/u5Wcxr8/frTzcNS0G3fDsft
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9128dbf9a176f01fc02196ccfd25c61_JaffaCakes118
Files
-
a9128dbf9a176f01fc02196ccfd25c61_JaffaCakes118.exe windows:4 windows x86 arch:x86
d68e0bbd1188af3aee097bc9d9dbc29c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentVariableW
GetCurrentProcessId
TlsGetValue
LocalFree
SuspendThread
ReadFile
InitializeCriticalSection
GetConsoleAliasA
lstrlenW
GetPrivateProfileStringA
FindAtomA
CreateEventW
GetDriveTypeW
GetNumberFormatA
HeapCreate
GetCurrentThreadId
LocalFlags
LoadLibraryW
ResumeThread
FindClose
user32
DrawTextA
GetClassInfoA
DrawStateW
GetKeyboardType
EndDialog
CreateWindowExA
IsWindow
GetSysColor
GetSysColor
DispatchMessageA
SetFocus
CallWindowProcW
GetClientRect
srclient
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
clbcatq
DllGetClassObject
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 484KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 364KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ