Static task
static1
Behavioral task
behavioral1
Sample
b139e5e8912dbe03a4dbd583994d5923_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b139e5e8912dbe03a4dbd583994d5923_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b139e5e8912dbe03a4dbd583994d5923_JaffaCakes118
-
Size
636KB
-
MD5
b139e5e8912dbe03a4dbd583994d5923
-
SHA1
f508818c4a458cadee47c6ef29c7303794f192e2
-
SHA256
bd863aa8974ea0e733bd6770b4038b2ace8e9c6624c4e86bce1c448920f7d5b5
-
SHA512
d37f23ef90a909741994d7cd77b00e24fc8177e2bb254274a492aa22e6a78b02058785ca6a2586dccfd30cb490a6e6a6ae81409d70b61a060531a49138202656
-
SSDEEP
12288:3cwB2In0wrb60Y9ek+xN33A9T1xITgrY5Lqnce7lEvXb+6G66RmBpky:sV0e0uEbqxpk55eJyXCN61Bd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b139e5e8912dbe03a4dbd583994d5923_JaffaCakes118
Files
-
b139e5e8912dbe03a4dbd583994d5923_JaffaCakes118.exe windows:4 windows x86 arch:x86
c9186a35fc382efdb470ada74e757074
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
lstrlenA
SuspendThread
HeapReAlloc
WaitForMultipleObjects
HeapCreate
GetSystemDefaultLangID
InterlockedExchange
GetVersion
GlobalUnlock
SetConsoleCP
GetConsoleCP
VirtualProtect
CompareFileTime
GetStdHandle
CloseHandle
OpenMutexA
GetCommandLineA
GetModuleHandleA
GetAtomNameA
GetTickCount
user32
DispatchMessageA
SetScrollInfo
GetDlgItem
InvertRect
MessageBoxA
CreateIcon
GetCursorInfo
DestroyMenu
GetKeyboardLayout
InsertMenuA
DialogBoxParamA
SetWindowPos
CopyImage
GetKeyState
FindWindowA
SetPropA
CreateMenu
DrawCaption
EnableScrollBar
DragObject
DispatchMessageA
CreateCursor
IsDialogMessage
advapi32
RegEnumKeyA
RegEnumValueA
RegQueryInfoKeyA
RegCreateKeyExA
RegCloseKey
uxtheme
GetThemeColor
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 600KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ