Static task
static1
Behavioral task
behavioral1
Sample
b584daaee43d1cfb890ee241a4038e66_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b584daaee43d1cfb890ee241a4038e66_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b584daaee43d1cfb890ee241a4038e66_JaffaCakes118
-
Size
368KB
-
MD5
b584daaee43d1cfb890ee241a4038e66
-
SHA1
dfd3e54f600a4b765e3ded5fd5c8c47392da1d46
-
SHA256
057e1e89de82d7da35afbf9773a1b1fac4fdc9aa084ecd54e2a135896f5aca00
-
SHA512
b16d86a0e21ada3cc8fbf58315033258aa2f40f9269781812ae71f5092714c06935a03b280784b564dfb818ba90d19dfb3f8d5e9f290862ccf247cc6d4bd2db9
-
SSDEEP
6144:lh1uuGRMLhrVf/DRauRHlwrFYaN5ino7241GtMqzIXPH8CV+mybPzKP3zUeXm9+r:lh1udRMNrpDneFNzino7IUHybPzQjUeX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b584daaee43d1cfb890ee241a4038e66_JaffaCakes118
Files
-
b584daaee43d1cfb890ee241a4038e66_JaffaCakes118.exe windows:4 windows x86 arch:x86
a54867f76e5317519e8121665087fe05
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEvent
FindAtomW
EnterCriticalSection
TlsGetValue
EnumCalendarInfoW
GetModuleHandleA
LocalFree
ResumeThread
GetDriveTypeW
GetNumberFormatW
ReadFile
SetLastError
HeapCreate
GetPrivateProfileStringW
lstrlenW
GetConsoleAliasW
CreateEventW
GetCurrentThreadId
FindClose
GetCurrentProcessId
user32
GetClassInfoA
DrawTextA
CallWindowProcW
DispatchMessageA
DispatchMessageA
SetFocus
GetMenuInfo
GetCursorInfo
GetClientRect
GetSysColor
IsWindow
GetKeyState
GetKeyboardType
unimdmat
UmCloseModem
UmCloseModem
UmCloseModem
UmCloseModem
UmCloseModem
msasn1
ASN1BERDecBool
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 358KB - Virtual size: 357KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ