Static task
static1
Behavioral task
behavioral1
Sample
b241996fa5827af7b5a2f5285d12b3de_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b241996fa5827af7b5a2f5285d12b3de_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b241996fa5827af7b5a2f5285d12b3de_JaffaCakes118
-
Size
365KB
-
MD5
b241996fa5827af7b5a2f5285d12b3de
-
SHA1
426749aa14a2794f297a229e1c5d2b1306c2da9f
-
SHA256
81e2ea0fa1d5726eaddca3f17cc0855a0f96243ba9bca7ebec7b134d544b8d38
-
SHA512
0cca9bb00f559e574a80fa1fac3233a9f2803578ac066441b0b8a23bd66e9797e95836c16d28cd88bb085abe082ce8ded17417948728b91725d73513a659ab2a
-
SSDEEP
6144:Cg4zRMHa4hib4j8jf51Qx7O6bcLehsEwkoK/6ERdFQJdlMu6lb/01apjbV6m8lL:CgqRM6x4ojf51aTcK0NEQUd0op3QlL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b241996fa5827af7b5a2f5285d12b3de_JaffaCakes118
Files
-
b241996fa5827af7b5a2f5285d12b3de_JaffaCakes118.exe windows:4 windows x86 arch:x86
ef3c6b925e8a648d10e1749280fd576b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesA
FindAtomW
EnumCalendarInfoW
SetLastError
GetCurrentThreadId
LocalFree
EnterCriticalSection
GetModuleFileNameA
GetConsoleAliasW
ReadFile
SetEvent
HeapCreate
GetCurrentProcessId
GetDriveTypeW
ResumeThread
CreateMailslotA
GlobalFree
GetPrivateProfileStringW
FindClose
GetModuleHandleA
user32
DrawTextW
SetFocus
GetCursorInfo
GetClassInfoA
IsWindow
GetKeyboardType
DispatchMessageA
GetClientRect
DispatchMessageA
GetMenuInfo
GetKeyState
GetSysColor
CallWindowProcW
asycfilt
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
msasn1
ASN1BERDecBool
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 355KB - Virtual size: 354KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ