Static task
static1
Behavioral task
behavioral1
Sample
b00ace7c31c3eda71b21af0eba91ec19_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b00ace7c31c3eda71b21af0eba91ec19_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b00ace7c31c3eda71b21af0eba91ec19_JaffaCakes118
-
Size
637KB
-
MD5
b00ace7c31c3eda71b21af0eba91ec19
-
SHA1
3a4f429f83facc1f69c5c13d6d973cad3e8ae72c
-
SHA256
00168f841fb7bfeebc2f43196b45968e4bf012477880c274d53f07599e57105e
-
SHA512
a6ea6c9f481d90ad74d0b00737e21fdf1706315f3b5a11e3c6fede9fd5699fbf90a2f50281f652bffecb00f7a52b7b719210680e9a292098fb0fce6b48e38496
-
SSDEEP
12288:cEWMadSLnNiPUJLHb5h+jqfi8ayQu2NjE8UIZd/AOz7pqN5I0kHUQSAE:/XLnEMJjqWq8MNgBIrhc5GZSA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b00ace7c31c3eda71b21af0eba91ec19_JaffaCakes118
Files
-
b00ace7c31c3eda71b21af0eba91ec19_JaffaCakes118.exe windows:4 windows x86 arch:x86
d9b7e34812cbd88dd507f7524dac84de
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsFree
GetACP
FindAtomA
GetModuleHandleA
GlobalUnlock
GetTickCount
GetProfileIntA
GetVersion
WaitForSingleObject
HeapWalk
lstrlenA
InterlockedExchange
GetAtomNameA
VirtualProtect
GetConsoleCP
LoadLibraryA
CloseHandle
GetStdHandle
TlsGetValue
HeapReAlloc
CompareFileTime
user32
PostQuitMessage
SetWindowPos
PaintDesktop
CopyRect
GetDlgItem
MessageBoxA
SetPropA
EqualRect
ModifyMenuA
PostMessageA
CreateCaret
LoadIconA
GetMenuStringA
GetMenu
DestroyMenu
TranslateMessage
GetScrollRange
InflateRect
DispatchMessageA
SubtractRect
EnableScrollBar
GetKeyboardLayout
GetWindowTextA
UpdateWindow
ShowWindow
DialogBoxParamA
InsertMenuA
msi
MsiEnumClientsA
MsiEnumProductsA
MsiGetMode
MsiCloseHandle
MsiDoActionA
ws2_32
WSAAccept
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ