Static task
static1
Behavioral task
behavioral1
Sample
b411b5c0f649156037a19716271987dc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b411b5c0f649156037a19716271987dc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b411b5c0f649156037a19716271987dc_JaffaCakes118
-
Size
32KB
-
MD5
b411b5c0f649156037a19716271987dc
-
SHA1
4bd1f54ebbbff1f02184006f29cd5987a875b747
-
SHA256
7d6a408de9f4b3f7db1db956e886305157a283313919bb1af2cb0ba39cda2d8c
-
SHA512
56f34bb9c49b54e96a1a11f6b7fb2faceb0f2941bec28e78ab99d1c11f0ed0d19fc61f7bd3f2be521b7edea9c1abd7351af3cae0f924907e0c75fb428c02b81a
-
SSDEEP
384:WaGZL3LGPKR2IXPmlQYMq8yyaQFmAvrh6orvLZ:claPiXW8y3QQAzh6orvL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b411b5c0f649156037a19716271987dc_JaffaCakes118
Files
-
b411b5c0f649156037a19716271987dc_JaffaCakes118.exe windows:4 windows x86 arch:x86
f3ca32988b73cb3bff92fc98b3181bf9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
ord2
MCIWndCreateA
kernel32
LCMapStringA
MultiByteToWideChar
LCMapStringW
lstrcpyA
SetHandleCount
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
GetStringTypeA
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetStringTypeW
user32
AdjustWindowRect
EndDialog
InvalidateRect
wsprintfA
SetWindowTextA
DrawMenuBar
BeginPaint
EndPaint
IsIconic
MoveWindow
PostQuitMessage
GetWindowLongA
DialogBoxParamA
DefWindowProcA
EnableMenuItem
GetWindowRect
SendMessageA
SetWindowPos
PostMessageA
GetMessageA
TranslateMessage
DispatchMessageA
MessageBeep
LoadIconA
LoadCursorA
RegisterClassA
GetSystemMetrics
CreateWindowExA
GetMenu
ShowWindow
UpdateWindow
DestroyWindow
MessageBoxA
LoadStringA
comdlg32
GetOpenFileNameA
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE