Static task
static1
Behavioral task
behavioral1
Sample
b2b73c2cec49c2e6dd60cf30dc5be9c2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b2b73c2cec49c2e6dd60cf30dc5be9c2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b2b73c2cec49c2e6dd60cf30dc5be9c2_JaffaCakes118
-
Size
198KB
-
MD5
b2b73c2cec49c2e6dd60cf30dc5be9c2
-
SHA1
f981e441511e0cb6214727dbac9c7893b751435c
-
SHA256
afd79b0b9ef6305e992148a1e1baf5869e2224fecbac6e5e8b340aac49758e83
-
SHA512
3e6c050a7af5d1d1048687e3fd9f0ef1824bc05c59e59094160014d5d9e569ffac27e7885186f51712f96c8279c37ccc3a6f2afef5251d460399a3fddf249ced
-
SSDEEP
6144:BcGE1Q+YU5ZS8B5iXeaGrqzJ83ek35erfGTns1a:uN1Q+dRIeaGSJw0rfLa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2b73c2cec49c2e6dd60cf30dc5be9c2_JaffaCakes118
Files
-
b2b73c2cec49c2e6dd60cf30dc5be9c2_JaffaCakes118.exe windows:4 windows x86 arch:x86
1446adcda09f1263c87fdf9399870f80
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegEnumValueW
RegOpenKeyW
RegSetValueExW
kernel32
CreateFileW
CreateThread
ExitProcess
LeaveCriticalSection
SetUnhandledExceptionFilter
TlsGetValue
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
memcpy
signal
strcpy
wcscpy
user32
AppendMenuW
CallWindowProcW
CheckMenuItem
CopyRect
CreatePopupMenu
DefFrameProcW
DefWindowProcW
DestroyMenu
EnableWindow
EndPaint
EnumWindows
GetClipboardData
GetClipboardFormatNameW
GetFocus
GetMessagePos
GetScrollInfo
GetWindowTextW
InvalidateRect
IsClipboardFormatAvailable
LoadCursorFromFileW
LoadIconW
MessageBeep
PeekMessageW
PostMessageW
ScrollWindow
SendMessageW
SetCursor
SetWindowsHookExW
ShowCaret
TrackPopupMenu
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 315KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ