Static task
static1
Behavioral task
behavioral1
Sample
a936db64fe17276dd29d7462178060b2_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a936db64fe17276dd29d7462178060b2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a936db64fe17276dd29d7462178060b2_JaffaCakes118
-
Size
85KB
-
MD5
a936db64fe17276dd29d7462178060b2
-
SHA1
f621658db305c3bbe563abae46ab365bd52095fb
-
SHA256
91694cae60f9f444cf3dcc2688751cdb429b7a99f62e1a55680b79fa2c96ac9c
-
SHA512
118901580e89c386d06e4b01b8d1d9bcc8aebce2f45e8689e82b372327b0f99181e2624080c7b30c861054dbf3a887b77a52d78e1735796469f59c9360c9ea09
-
SSDEEP
768:YMeEiux0rtKYAqvGZmcrAz/y/qOs5p91Lli6w+7UfqndEkZJRih51gbgiaDZN9/Q:ZEKgixrcJ3LBw+7KqL0f1gbyDLu4J0l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a936db64fe17276dd29d7462178060b2_JaffaCakes118
Files
-
a936db64fe17276dd29d7462178060b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
eb21b266d35956fe5865e076af33c8c2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
MapViewOfFile
RtlZeroMemory
SetFilePointer
UnmapViewOfFile
WideCharToMultiByte
WriteFile
lstrcatA
lstrlenA
GetModuleHandleA
LoadResource
FindResourceA
Sleep
HeapDestroy
HeapCreate
HeapAlloc
SizeofResource
SetThreadPriority
CreateThread
WaitForSingleObject
ExitProcess
GetFileSize
CreateFileMappingA
CreateFileA
CloseHandle
user32
SetWindowLongA
SendMessageA
MessageBoxA
LoadIconA
GetWindowTextA
GetDlgItem
EndDialog
DialogBoxParamA
CharUpperW
CallWindowProcA
GetWindowTextW
comctl32
InitCommonControls
comdlg32
GetOpenFileNameA
imagehlp
CheckSumMappedFile
winmm
waveOutGetPosition
waveOutOpen
waveOutPrepareHeader
waveOutReset
waveOutUnprepareHeader
waveOutWrite
waveOutClose
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE