Static task
static1
Behavioral task
behavioral1
Sample
ab062382256b85f7a126c2ca9b97e554_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ab062382256b85f7a126c2ca9b97e554_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ab062382256b85f7a126c2ca9b97e554_JaffaCakes118
-
Size
2KB
-
MD5
ab062382256b85f7a126c2ca9b97e554
-
SHA1
4961531728808509e15664ce69e2d4ff5c8d5f6b
-
SHA256
406983b933568baf659e2df63afff2da612be3e4da42bcc26afa7557efe9843e
-
SHA512
419ad25d1e374f362e6b6a2ce8764ef88818d24c15d55a1d05ba99919fab977663f12d3cb3be9f4479b0464b9ce913ec3173e1e598cadbf24d8fb35d0b0df362
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab062382256b85f7a126c2ca9b97e554_JaffaCakes118
Files
-
ab062382256b85f7a126c2ca9b97e554_JaffaCakes118.exe windows:5 windows x86 arch:x86
0a39a110196186afc43ed00e2550396b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ActivateKeyboardLayout
DefWindowProcW
DestroyIcon
EndMenu
GetKeyNameTextW
DlgDirListW
DrawEdge
DrawIconEx
CascadeWindows
CheckRadioButton
CreateWindowExW
GetMessageW
GetMessageTime
GetPropW
GetScrollRange
UnhookWinEvent
VkKeyScanExW
ToAsciiEx
SetWindowLongW
SetTimer
gdi32
GetMapMode
GetMiterLimit
GetPixel
CreateCompatibleDC
CreatePalette
GetBkColor
GetBrushOrgEx
GetCharWidthW
GetClipBox
GdiFlush
GetDeviceCaps
GetFontData
EqualRgn
EndDoc
Escape
FillPath
FillRgn
GetRelAbs
SetBkColor
GetTextFaceW
kernel32
ExitProcess
InitAtomTable
CreateFileW
WriteFile
ReadFile
SetConsoleCP
GetModuleHandleW
VirtualProtect
Sections
.text Size: 76KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE