Static task
static1
Behavioral task
behavioral1
Sample
aac2895f1d0c3e412523819888fa68b0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aac2895f1d0c3e412523819888fa68b0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aac2895f1d0c3e412523819888fa68b0_JaffaCakes118
-
Size
392KB
-
MD5
aac2895f1d0c3e412523819888fa68b0
-
SHA1
02c6b7551a263fa3aee8e5b35e13d71645e543c3
-
SHA256
2083f4f0592acdfed915053fb67898bc89f04796ffcc9f384e2efe8b0a5ece73
-
SHA512
99d13187b327c99b08bb92567f7b295d98aed5e5d7e9c0a3c35e71b6dc244c8b8677b5264ec637debad6eb81a0180123674bda26c8054c10aab6aa4f7521671b
-
SSDEEP
6144:16wUkqkFwzgVq767LkLbv1P/AxrvNCBeq0fG5bfAYSR6VbysZk1dWyRr3d2NqCDf:16jCJibvNYJbxYYgbRke6D8NqCDf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aac2895f1d0c3e412523819888fa68b0_JaffaCakes118
Files
-
aac2895f1d0c3e412523819888fa68b0_JaffaCakes118.exe windows:4 windows x86 arch:x86
76d846934fea507e434152bb849593e8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
GlobalFree
HeapDestroy
GetACP
FindResourceA
CreateMutexA
ExitProcess
GetModuleHandleA
FreeConsole
Sleep
TlsGetValue
FindClose
GetLastError
UnmapViewOfFile
FreeEnvironmentStringsA
LocalUnlock
CreateFileA
LoadLibraryExA
HeapCreate
SetVolumeMountPointA
user32
CheckRadioButton
GetDlgItem
DispatchMessageA
GetIconInfo
GetDC
FillRect
DrawEdge
IsWindow
DefWindowProcW
CallWindowProcA
DrawMenuBar
CopyRect
GetFocus
uxtheme
DrawThemeEdge
DrawThemeText
GetThemeRect
GetThemeSysInt
DrawThemeIcon
clbcatq
SetupOpen
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ