Static task
static1
Behavioral task
behavioral1
Sample
b2f91793b0555459332c5b47964e668c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b2f91793b0555459332c5b47964e668c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b2f91793b0555459332c5b47964e668c_JaffaCakes118
-
Size
813KB
-
MD5
b2f91793b0555459332c5b47964e668c
-
SHA1
0e5a57f192a5c817d6e68576fc0fb1ac2e7a8eff
-
SHA256
55da757ca8cc304fe76bfb4699825c57e091b38cfbcd5307bb074e655798e894
-
SHA512
78efb2b15761d60f44aecb327f611a018c5576b14a50fe294d479b964bbd28ba38b1d63aafb3e5fa93f896a2c95a17244be99f011902ed42fae023420e47ecf3
-
SSDEEP
24576:MxHRCEVffuSAA6hcFBAQ6xngs65Va2jl/:CHRCOapdca2B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2f91793b0555459332c5b47964e668c_JaffaCakes118
Files
-
b2f91793b0555459332c5b47964e668c_JaffaCakes118.exe windows:4 windows x86 arch:x86
8f0b19ad6bdaf7af5dbd0a78275f3c2c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
FindClose
CreateFileMappingA
GetConsoleCP
CreateEventA
FreeEnvironmentStringsA
lstrlenA
CloseHandle
LoadLibraryExA
CreateMailslotA
HeapCreate
GlobalUnlock
GlobalLock
IsDebuggerPresent
GetStdHandle
CreateFileA
IsBadReadPtr
GetLastError
LocalFree
GetACP
user32
GetDlgItemTextA
DialogBoxParamA
RedrawWindow
IsMenu
CheckMenuItem
GetDC
GetDlgItem
GetListBoxInfo
SetFocus
EndDialog
GetIconInfo
GetMessageA
DispatchMessageA
DrawIconEx
uxtheme
GetThemeColor
GetThemeMetric
EnableTheming
DrawThemeIcon
CloseThemeData
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ