Static task
static1
Behavioral task
behavioral1
Sample
a90caac7f86f779d637605ac45f8eac6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a90caac7f86f779d637605ac45f8eac6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a90caac7f86f779d637605ac45f8eac6_JaffaCakes118
-
Size
368KB
-
MD5
a90caac7f86f779d637605ac45f8eac6
-
SHA1
f325058e4c77a3c6f79385baa0c48c0f447ca258
-
SHA256
af47d3fbfcd91a2863c469a7851b6f1bb21bbd4a561411a0a0479e2bc780abc0
-
SHA512
44c8efdd3f3989e3e502b661b3c9696539fa36398dcb253b107dc77a1afbf1f801fafc1dc0a5d1606398623b0a10a3a8e4b7ac377c44cf66c07693e32846689f
-
SSDEEP
6144:mTlhRM0hrVf/DRauRHlwrFYaN5ino7241GtMqzIXPH8CV+mybPzKP3zUeXm9+r:mTlhRMCrpDneFNzino7IUHybPzQjUeX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a90caac7f86f779d637605ac45f8eac6_JaffaCakes118
Files
-
a90caac7f86f779d637605ac45f8eac6_JaffaCakes118.exe windows:4 windows x86 arch:x86
65a0ec15a8fe22ed26e75fcc63617c4a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumCalendarInfoW
SetEvent
FindClose
GetModuleHandleA
GetDriveTypeW
CreateEventW
ReadFile
lstrlenW
GetCurrentProcessId
GetPrivateProfileStringW
GetCurrentThreadId
HeapCreate
FindAtomW
GetConsoleAliasW
GetNumberFormatW
ResumeThread
EnterCriticalSection
TlsGetValue
LocalFree
SetLastError
user32
GetCursorInfo
GetKeyboardType
IsWindow
DispatchMessageA
GetKeyState
CallWindowProcW
SetFocus
GetClientRect
GetClassInfoA
DispatchMessageA
GetSysColor
DrawTextA
GetMenuInfo
unimdmat
UmCloseModem
UmCloseModem
UmCloseModem
UmCloseModem
UmCloseModem
msasn1
ASN1BERDecBool
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 358KB - Virtual size: 357KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ