Static task
static1
Behavioral task
behavioral1
Sample
a90da4d05b44ad0c18cded57f279f91c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a90da4d05b44ad0c18cded57f279f91c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a90da4d05b44ad0c18cded57f279f91c_JaffaCakes118
-
Size
20KB
-
MD5
a90da4d05b44ad0c18cded57f279f91c
-
SHA1
15c5d6dc11e6096cb984b895a826708e304a2169
-
SHA256
53e02f18d268bbe2532cde4b687517c4ba2f81961cd96b818897178b8a25ce15
-
SHA512
8dc678e8c68f653d6bfa7f069bbf6742d6fa2fb7822785544d2ecaa33af1c53c6a0cd312025db6e668a491bd0e7e00ad66b878e13a830b72488b5fab272bb298
-
SSDEEP
384:nm/CcZlw+eNvQswNqNM3hDXvhAk+8+s5wUIogOi:nm/Cc/9Nd3NXvyk+8h5kT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a90da4d05b44ad0c18cded57f279f91c_JaffaCakes118
Files
-
a90da4d05b44ad0c18cded57f279f91c_JaffaCakes118.exe windows:4 windows x86 arch:x86
35a04762116f8e152f889087a5de9689
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LocalFree
GlobalLock
CreateEventA
FreeEnvironmentStringsA
OpenMutexA
IsBadReadPtr
OpenSemaphoreA
GlobalUnlock
lstrlenA
GetACP
CloseHandle
ResumeThread
LoadLibraryExA
FreeConsole
VirtualProtectEx
FindClose
GetSystemTime
GetStdHandle
GetLastError
user32
GetComboBoxInfo
CreateWindowExA
LoadCursorA
SetFocus
GetMessageA
DialogBoxParamA
ClipCursor
IsIconic
GetSubMenu
GetDlgItemTextA
EndDialog
IsMenu
GetMessageA
MessageBoxA
msasn1
ASN1BERDecCheck
ASN1BEREncOpenType
ASN1BERDecBool
ASN1DecAlloc
ASN1BEREncNull
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ