Static task
static1
Behavioral task
behavioral1
Sample
b2735ff8251132caaa6a4fe89723e6eb_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b2735ff8251132caaa6a4fe89723e6eb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b2735ff8251132caaa6a4fe89723e6eb_JaffaCakes118
-
Size
365KB
-
MD5
b2735ff8251132caaa6a4fe89723e6eb
-
SHA1
56797b32f34636ac930985a26e023e2762d6d277
-
SHA256
879fcb9b492bbf251c285879d0c78d4e2b77ca21b22ff89ec356110958fd77fd
-
SHA512
ea8fab3ded0c07d246de3a74ca4efdc459acb8c4d2132ec5cbfd98d1ca2eae0abe376baf62689da4394ce7230367261d08740f8b507b3c87aae56fe88850d3df
-
SSDEEP
6144:sRMUa4hib4j8jf51Qx7O6bcLehsEwkoK/6ERdFQJdlMu6lb/01apjbV6m8lL:sRMjx4ojf51aTcK0NEQUd0op3QlL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2735ff8251132caaa6a4fe89723e6eb_JaffaCakes118
Files
-
b2735ff8251132caaa6a4fe89723e6eb_JaffaCakes118.exe windows:4 windows x86 arch:x86
cf4fa57e91604a39d0888d73f799c1db
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
GetCurrentProcessId
EnumCalendarInfoW
SetLastError
SetEvent
GetFileAttributesA
GlobalFree
GetConsoleAliasW
GetModuleHandleA
HeapCreate
GetCurrentThreadId
EnterCriticalSection
GetDriveTypeW
LocalFree
GetPrivateProfileStringW
FindAtomW
CreateMailslotA
FindClose
ResumeThread
ReadFile
user32
GetSysColor
DispatchMessageA
IsWindow
GetMenuInfo
DispatchMessageA
SetFocus
GetClientRect
GetClassInfoA
GetKeyboardType
GetCursorInfo
GetKeyState
CallWindowProcW
DrawTextW
asycfilt
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
msasn1
ASN1BERDecBool
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 355KB - Virtual size: 354KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ