Static task
static1
Behavioral task
behavioral1
Sample
b3489ccf07321e886178aadbcca4ac0b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b3489ccf07321e886178aadbcca4ac0b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b3489ccf07321e886178aadbcca4ac0b_JaffaCakes118
-
Size
374KB
-
MD5
b3489ccf07321e886178aadbcca4ac0b
-
SHA1
a83b82fb92696ccecfe43a52c597124d4f683874
-
SHA256
ed11ce610c39615e7f65530c3a8dcef16279b1cd2886ac042f26d655f887b02b
-
SHA512
ab9797b80fccf2f8158dcb772d2f2b1ad8bcc3daea402420f2e272dd46db99499bb3fd3904801c6d0d741c6d2743f0ea8a965f5ac3045194ef0ae680736c21f0
-
SSDEEP
6144:3tSvNRMacKP9EoxGcTYNh91DQJ7w6Mcx8MYeWKnEWYzXTz+VNypJOVglH5fDsf1D:3tSFRMaaL9/u5Wcxr8/frTzcNS0G3fDs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3489ccf07321e886178aadbcca4ac0b_JaffaCakes118
Files
-
b3489ccf07321e886178aadbcca4ac0b_JaffaCakes118.exe windows:4 windows x86 arch:x86
83d1abe21242dbca5519539a1f0cac25
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFlags
LocalFree
EnumCalendarInfoA
lstrlenW
GetCurrentThreadId
FindAtomA
SetLastError
GetDriveTypeW
GetNumberFormatA
ResumeThread
HeapCreate
ReadFile
CreateEventW
GetPrivateProfileStringA
GetConsoleAliasA
TlsGetValue
FindClose
EnterCriticalSection
GetCurrentProcessId
GetModuleHandleA
user32
GetSysColor
GetCursorInfo
GetKeyboardType
GetMenuInfo
GetClientRect
DispatchMessageA
SetFocus
CallWindowProcW
GetClassInfoA
DispatchMessageA
DrawTextA
IsWindow
GetKeyState
stclient
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
ntshrui
IsPathSharedA
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 484KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 364KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ