Static task
static1
Behavioral task
behavioral1
Sample
af56c6cd3635939af381d245067df90c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
af56c6cd3635939af381d245067df90c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
af56c6cd3635939af381d245067df90c_JaffaCakes118
-
Size
314KB
-
MD5
af56c6cd3635939af381d245067df90c
-
SHA1
ca4ad719273e3f6b338bfc6a15cf8b65d888d7b4
-
SHA256
7abd51bcdb8d5f854ae7cd183cea8730aafec615f036404bf55e9e34f1d39f16
-
SHA512
7488c921705990d1d0454b08027e869630a0be910ae49cbc98351d4e4d5a38dbff46c0c9d31fa6f768a360114c7f81788729571e3707e157554d6a44395c3a9a
-
SSDEEP
6144:rGq+u0qJmgpkIny2wOZ85x8/HCV+EppS926YAxS5Ugl7YWc:rGkmsy2wOKSE+EpIY7Zr15
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af56c6cd3635939af381d245067df90c_JaffaCakes118
Files
-
af56c6cd3635939af381d245067df90c_JaffaCakes118.exe windows:4 windows x86 arch:x86
3ba137da64743992f6f0114dce813d72
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetCurrentProcessId
SetStdHandle
GetFileSize
CreateFileMappingA
CreateFileA
GetEnvironmentVariableA
FlushFileBuffers
WriteConsoleA
FlushFileBuffers
SetErrorMode
ExitProcess
SetFilePointer
ReadFile
FindResourceExA
GetConsoleCP
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
HeapCreate
LockResource
CreateFileW
GetConsoleMode
GetThreadLocale
shlwapi
PathAddBackslashW
user32
DialogBoxParamW
UnregisterClassA
GetWindowRect
SystemParametersInfoA
SendDlgItemMessageW
SetDlgItemTextW
EnumWindowStationsW
CharPrevW
EndDialog
SetWindowPos
SendMessageA
GetDlgItem
CharNextA
comsvcs
CoEnterServiceDomain
ole32
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
StringFromGUID2
shell32
SHGetFolderPathW
Sections
.text Size: 206KB - Virtual size: 205KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.venue Size: 5KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ