Static task
static1
Behavioral task
behavioral1
Sample
ac7d4d1451e417f87ee837f20dc73b13_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ac7d4d1451e417f87ee837f20dc73b13_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ac7d4d1451e417f87ee837f20dc73b13_JaffaCakes118
-
Size
636KB
-
MD5
ac7d4d1451e417f87ee837f20dc73b13
-
SHA1
e0715ed3222887e933496949a08c73b568d9e8a6
-
SHA256
5fc5e1a318068673487425a72ce311a394966c18284b69ffa843feb25a35db7f
-
SHA512
e1581190a2307a7ee75f21907223f47fad4298e60e5379850fd04895941e0701a7fb1ca5542d961649861bc9adcc24ef54c43fe6b634a5d50c3cf5013e6de737
-
SSDEEP
12288:Pp1Nfjk1bsLb7LfmkqOUBRZvfCHXYCImAV7xdBiNtbcl+V50ES:Pp7AtsLb7zmk2B7cDAxxOjTV5Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac7d4d1451e417f87ee837f20dc73b13_JaffaCakes118
Files
-
ac7d4d1451e417f87ee837f20dc73b13_JaffaCakes118.exe windows:4 windows x86 arch:x86
439dc359b55a4a49009e15f4f1460bfd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
CreateIoCompletionPort
GetStdHandle
GetCurrentProcessId
VirtualProtect
GetCurrentThread
GetProcessVersion
GetModuleHandleA
HeapDestroy
GetTapeStatus
HeapQueryInformation
LoadLibraryExA
GlobalMemoryStatus
InterlockedExchange
GetTimeFormatA
GetEnvironmentStringsA
GetProcessHeap
WaitForSingleObject
GetACP
GetLogicalDrives
IsDebuggerPresent
user32
GetParent
SetForegroundWindow
GetWindowTextLengthA
GetWindow
wsprintfA
FillRect
GetClassNameA
GetTitleBarInfo
GetCursorPos
DrawTextA
FrameRect
ShowWindow
SetActiveWindow
GetFocus
EndPaint
DragDetect
ReleaseDC
GetDlgItem
BeginPaint
gdi32
CreatePalette
GetClipBox
CreateBitmap
CloseFigure
GetLayout
setupapi
SetupCloseLog
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ