Static task
static1
Behavioral task
behavioral1
Sample
a9c428e334dbf286ea1882c9761ce425_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a9c428e334dbf286ea1882c9761ce425_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a9c428e334dbf286ea1882c9761ce425_JaffaCakes118
-
Size
386KB
-
MD5
a9c428e334dbf286ea1882c9761ce425
-
SHA1
31da342a401cc6f23860feaa088a34933419fbcb
-
SHA256
86dd4a1b384d642e0db2cd67e0ce5b5021bac8df2dc7a404a0807083783be39d
-
SHA512
1534b6b842bee76d2ec94f5cb3c696a585e39a4f0184605967646d848f8cb5a04946c290cd17f0c11b802f7940b52b9f5ad509b3d6c1d0ee58192809fc0ffed0
-
SSDEEP
3072:SVCGQW5LgsexLCjODTWVin2jW+Y1ori+WY:S0G1CZYgTW4IYo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9c428e334dbf286ea1882c9761ce425_JaffaCakes118
Files
-
a9c428e334dbf286ea1882c9761ce425_JaffaCakes118.exe windows:4 windows x86 arch:x86
b56314658df8fae4c2450b2558172081
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
FindFirstFileA
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GetTimeFormatA
GetStartupInfoA
GetProfileStringA
GetModuleHandleA
GetLocaleInfoA
GetLocalTime
GetLastError
GetDateFormatA
GetCommandLineA
ExitProcess
DeleteFileA
CreateFileA
OutputDebugStringA
ReadProcessMemory
GetCurrentProcess
user32
DispatchMessageA
TranslateMessage
GetMessageA
RegisterClassExA
LoadCursorA
LoadIconA
UpdateWindow
ShowWindow
CreateWindowExA
PostQuitMessage
EndPaint
DrawTextA
GetClientRect
BeginPaint
DialogBoxParamA
DestroyWindow
DefWindowProcA
LoadStringA
EndDialog
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdata Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.afv Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE