Static task
static1
Behavioral task
behavioral1
Sample
ac43d20591de0f7e230a3522b69df9d2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ac43d20591de0f7e230a3522b69df9d2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ac43d20591de0f7e230a3522b69df9d2_JaffaCakes118
-
Size
47KB
-
MD5
ac43d20591de0f7e230a3522b69df9d2
-
SHA1
37ebcfb0a5cf5bdc9354203619b6fe80decaf79a
-
SHA256
64085d35ac2f49d215171087ce5aa6d7dbc4dcb4e1c34f19a65c2153dc74ece7
-
SHA512
7e9d495ad372d4e19ae9d356f360da53f9f9d2c0c2f6581b8af76ccef18c264f6d11a896e54a081e6a65ee0866d773eade3a0d68765382071a9736710b5ff6e0
-
SSDEEP
768:TA0e8ND61raN5iQHRwYsBOEYrPsIZZoLGjnGi05T+eIjng24CXQMzi:te8NDuWN5iQHRkBFYrUINiNgeIjZs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac43d20591de0f7e230a3522b69df9d2_JaffaCakes118
Files
-
ac43d20591de0f7e230a3522b69df9d2_JaffaCakes118.exe windows:4 windows x86 arch:x86
6fb631f0008b5b4e80877438f15e803c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBeep
GetTopWindow
MessageBoxA
DialogBoxParamA
CharUpperA
IsIconic
CharNextA
DestroyIcon
GetSystemMetrics
ShowWindow
CreateWindowExA
SetCursorPos
CharLowerA
KillTimer
GetSysColorBrush
SetTimer
ShowCursor
GetMessagePos
SetWindowTextA
GetMenuItemCount
GetDesktopWindow
ReleaseDC
kernel32
GetConsoleCP
lstrlenA
GlobalDeleteAtom
lstrcatA
SetLastError
LoadLibraryA
Sleep
GetProcAddress
GetLastError
GlobalFindAtomA
GetCommandLineA
GetConsoleOutputCP
FindResourceA
AllocConsole
CopyFileA
GlobalAddAtomA
FreeLibrary
shell32
DragFinish
ShellAboutA
gdi32
GetObjectA
SetBkMode
CreateCompatibleDC
SetTextColor
GdiGetBatchLimit
DeleteDC
DeleteObject
SetBkColor
EndPage
CreateSolidBrush
ole32
CoFreeUnusedLibraries
CoFreeAllLibraries
CoGetCurrentProcess
comctl32
InitCommonControls
FlatSB_ShowScrollBar
MakeDragList
FlatSB_GetScrollPos
GetEffectiveClientRect
DrawInsert
FlatSB_GetScrollRange
FlatSB_GetScrollProp
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ