Static task
static1
Behavioral task
behavioral1
Sample
b3609f64095b0c7ac77d69f1dd31da40_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b3609f64095b0c7ac77d69f1dd31da40_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b3609f64095b0c7ac77d69f1dd31da40_JaffaCakes118
-
Size
279KB
-
MD5
b3609f64095b0c7ac77d69f1dd31da40
-
SHA1
00357712cef8ecadda2f5b809f93c311773aedb6
-
SHA256
2fe774efe2be8f0de7cbcdf339f363da2dd537df31978283eb1aff4907205be8
-
SHA512
915e9214bc1a4096fa05880643fccfef804af084bd24d9a68106d161f2d2326826e1b9cae0e9e8b68e3908e10e98ff9ac448c4dc95987257c46c7a6f05eeb543
-
SSDEEP
6144:kGiijjcNPNU/gCF+WhGGHdnizNgwV8DCRJvrKo5hxPKLQIiB:liiKVggCFOGHM5gwVNR9rK6aLeB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3609f64095b0c7ac77d69f1dd31da40_JaffaCakes118
Files
-
b3609f64095b0c7ac77d69f1dd31da40_JaffaCakes118.exe windows:4 windows x86 arch:x86
51d18ccd36a615c407156b644bb1f081
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalHandle
GetModuleHandleA
CreateThread
GlobalFindAtomA
GetUserDefaultLangID
TlsFree
VirtualAlloc
GetStdHandle
GetOEMCP
CompareStringA
GlobalLock
GetPriorityClass
TlsGetValue
LoadResource
GlobalFree
GlobalFlags
OpenSemaphoreA
GetVolumeInformationA
LocalAlloc
GetProcessHeap
ReleaseMutex
user32
ValidateRect
BeginPaint
ReleaseDC
GetClassInfoExA
GetDC
RegisterClassA
DrawEdge
EndPaint
CloseWindow
GetFocus
ShowWindow
GetForegroundWindow
GetWindowTextA
GetWindowTextLengthA
IsIconic
GetParent
GetActiveWindow
GetClassNameA
GetWindow
shell32
SHChangeNotify
SHGetFileInfoA
SHGetFolderPathA
SHGetMalloc
SHBrowseForFolderA
userenv
GetGPOListA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 880KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ