Static task
static1
Behavioral task
behavioral1
Sample
a965e17f4d544ca285597c1c43f2011e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a965e17f4d544ca285597c1c43f2011e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a965e17f4d544ca285597c1c43f2011e_JaffaCakes118
-
Size
6KB
-
MD5
a965e17f4d544ca285597c1c43f2011e
-
SHA1
bbf5ce45949c175fab928a5b613d6f08be684d1d
-
SHA256
2ea21e0426975bda50164f3f0c36e1436c12f5faeaae3152737db9fbace1c467
-
SHA512
02b676ccc2f4190da2678fcdb9258d43976468c22ff1b9d37348f56cd60a5c67407aa985372aa296b226efc57b1fc5f8d3e950d523047be189b161ce6c5d1337
-
SSDEEP
96:jOiyjNr8szdgP5eiT/1yMKJ+ft8UH7Rbh3N9kQnEJjWY2U:iDZZJgP5vTLPWgRFNlnEJjWY2U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a965e17f4d544ca285597c1c43f2011e_JaffaCakes118
Files
-
a965e17f4d544ca285597c1c43f2011e_JaffaCakes118.exe windows:4 windows x86 arch:x86
e6e17a714b421e06ce04621281dca6f1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsFree
GetThreadTimes
GetHandleContext
GetUserDefaultLangID
AddAtomA
GetModuleHandleA
CompareStringA
TlsGetValue
SetEvent
VirtualAlloc
GetExitCodeThread
GetThreadPriority
GetConsoleCP
CreateMutexA
CreatePipe
GetThreadLocale
CancelWaitableTimer
ReleaseMutex
GetOEMCP
GetLargestConsoleWindowSize
IsDBCSLeadByte
user32
GetActiveWindow
GetSystemMetrics
InvalidateRect
ReleaseDC
GetClassNameA
GetFocus
IsIconic
GetWindowTextA
GetWindow
ValidateRect
IsWindowVisible
GetDC
CloseWindow
ShowWindow
GetClassInfoExA
ReleaseDC
GetForegroundWindow
RegisterClassA
GetWindowTextLengthA
tapi32
MMCSetPhoneInfo
MMCSetServerConfig
MMCSetLineInfo
MMCInitialize
MMCShutdown
wldap32
ldap_add
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 956KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ