Static task
static1
Behavioral task
behavioral1
Sample
afc23dfe891e282dc9f9c809b045193e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
afc23dfe891e282dc9f9c809b045193e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
afc23dfe891e282dc9f9c809b045193e_JaffaCakes118
-
Size
329KB
-
MD5
afc23dfe891e282dc9f9c809b045193e
-
SHA1
7eeb118fae89870273540d19fde7e2fa79e78329
-
SHA256
9d86e192f38c6bc1839409a2de998dca8446fdf58fa0801a661ebf864463fe76
-
SHA512
faf8f999e9c2147047a0d512bfd76aff308bcafd01bdfbe4c6e4f7606ea2f4246e8d26215265ee0e4dab60e7754c9963dad4e533e07ffdad25ffe6a023f642a5
-
SSDEEP
6144:wbgFsI5goL6lfIZfYfZOK+aunHePL28NcWmtcU5w:ZbpOl2QxOGunH4L28NcWc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource afc23dfe891e282dc9f9c809b045193e_JaffaCakes118
Files
-
afc23dfe891e282dc9f9c809b045193e_JaffaCakes118.exe windows:4 windows x86 arch:x86
b1cb3d02a70a65dca41e951ea331a1ca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
VirtualProtect
GlobalUnlock
CloseHandle
HeapReAlloc
LoadLibraryA
InterlockedExchange
GetACP
GetConsoleCP
HeapWalk
GetTickCount
lstrlenA
FindAtomA
TlsFree
GetAtomNameA
WaitForSingleObject
GetModuleHandleA
GetStdHandle
GetProfileIntA
TlsGetValue
CompareFileTime
user32
DestroyMenu
InflateRect
DialogBoxParamA
GetMenu
CreateCaret
CopyRect
GetWindowTextA
SubtractRect
MessageBoxA
GetKeyboardLayout
ModifyMenuA
SetWindowPos
LoadIconA
EqualRect
DispatchMessageA
GetScrollRange
SetPropA
GetDlgItem
PostQuitMessage
PaintDesktop
EnableScrollBar
ShowWindow
PostMessageA
TranslateMessage
GetSubMenu
UpdateWindow
GetMenuStringA
InsertMenuA
msi
MsiEnumClientsA
MsiEnumProductsA
MsiGetMode
MsiCloseHandle
MsiDoActionA
uxtheme
GetThemeBool
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 744KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ