Static task
static1
Behavioral task
behavioral1
Sample
a90e9fb0cf2a05f4f61a4677b99c629e_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a90e9fb0cf2a05f4f61a4677b99c629e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a90e9fb0cf2a05f4f61a4677b99c629e_JaffaCakes118
-
Size
19KB
-
MD5
a90e9fb0cf2a05f4f61a4677b99c629e
-
SHA1
0a9dd34aabbb56ed43a2ba9333e6c5128da4da70
-
SHA256
cc279025dddfd46551db47613b1c3c8d3c2f012c898dd17fe2db011e6ab6c55a
-
SHA512
847d3acf06f30dbfe49bf437ac16a8f01f7333a6a1b5bba84b5f536ff7676f307e7efb3af8463b3448c2fc8c79d17d8491483c3925f61c65c17e0176e9a8699b
-
SSDEEP
192:QXaNMOhYzUSqFxSBSANe7xM1Yw14Z3Zx/9a6+:QXaNM0LSjAd7qpCxPV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a90e9fb0cf2a05f4f61a4677b99c629e_JaffaCakes118
Files
-
a90e9fb0cf2a05f4f61a4677b99c629e_JaffaCakes118.exe windows:4 windows x86 arch:x86
89e861387cceacbe71bac1e6959dc249
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
ReleaseMutex
GetThreadLocale
IsDBCSLeadByte
AddAtomA
CompareStringA
VirtualAlloc
GetUserDefaultLangID
CreateMutexA
GetThreadTimes
PulseEvent
GetConsoleCP
TlsGetValue
GetExitCodeThread
GetLargestConsoleWindowSize
GetThreadPriority
GetOEMCP
SetEvent
TlsFree
CallNamedPipeA
GetDefaultCommConfigA
user32
ReleaseDC
GetWindowTextA
ValidateRect
IsWindowVisible
GetWindow
GetClassNameA
GetDC
GetSystemMetrics
GetClassInfoExA
RegisterClassA
CloseWindow
GetActiveWindow
ReleaseDC
GetForegroundWindow
InvalidateRect
GetWindowTextLengthA
GetFocus
IsIconic
ShowWindow
tapi32
MMCInitialize
MMCShutdown
MMCSetLineInfo
MMCSetServerConfig
MMCSetPhoneInfo
mlang
DllGetClassObject
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ