Static task
static1
Behavioral task
behavioral1
Sample
b00524af91222f5d9bf452b416280cf3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b00524af91222f5d9bf452b416280cf3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b00524af91222f5d9bf452b416280cf3_JaffaCakes118
-
Size
55KB
-
MD5
b00524af91222f5d9bf452b416280cf3
-
SHA1
2b8309a00d6a9e11a99611fca09dc0db645803fc
-
SHA256
52fb075a935637bcd25cd37761f8e9518eef0eed6f54ee8eea6396329280fcde
-
SHA512
70e490a531ac4721237a58b2f86f4773edf42bd9a21314c9941d18dadf5f903c1be3a5a21f8912fa32c04803d204888b7aae1de17de5a7091390e45105153e10
-
SSDEEP
1536:WAcvSN294rWuCZav40qjSgAFsgNWMsQY+frR:WhvSN294rWuC0Q0qexFBcMsQB9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b00524af91222f5d9bf452b416280cf3_JaffaCakes118
Files
-
b00524af91222f5d9bf452b416280cf3_JaffaCakes118.exe windows:4 windows x86 arch:x86
268b7938380f811000f40fc2afab1bcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
FreeEnvironmentStringsA
LocalLock
IsDebuggerPresent
GetACP
GetConsoleAliasA
CreateFileMappingA
FindClose
TlsGetValue
FindAtomA
GetLastError
HeapCreate
LoadLibraryExA
LocalUnlock
GetCalendarInfoA
WaitForSingleObject
LocalFree
GetConsoleCP
CreateFileA
GetModuleHandleA
user32
CascadeWindows
DrawEdge
DispatchMessageA
IsWindow
GetMessageA
SetFocus
DefWindowProcA
GetIconInfo
DrawTextA
CallWindowProcA
GetDC
GetDlgItem
CreateDialogParamA
DrawIconEx
msasn1
ASN1BEREncFlush
ASN1BERDecEoid
ASN1BERDecCheck
ASN1BERDecBool
ASN1BEREncLength
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ