Static task
static1
Behavioral task
behavioral1
Sample
b953a304ff0248da9907e975568696df_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b953a304ff0248da9907e975568696df_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b953a304ff0248da9907e975568696df_JaffaCakes118
-
Size
85KB
-
MD5
b953a304ff0248da9907e975568696df
-
SHA1
99bbb3414537f15e6922be348195ddded10c432c
-
SHA256
4994ced0aa893c28a4aa7efd22f348a63a7a070251f18f1b473770ca1df7061f
-
SHA512
dc83f553e5f59cf247104ed144ee37cf40f59a092cb6fc23ebe5090aab21b32e995c0770fa773343194bd548b2d023001900d7695e3a8b139a573afa02aeb68a
-
SSDEEP
1536:D7XTaqRDY8OWwX8jtjooGlksXZjsZgm9igxwxHctBP5tJxb7hCcpJHX1x6LD:D7XTaqBYPWwX8jFCZoZgmw8ycthBxbFo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b953a304ff0248da9907e975568696df_JaffaCakes118
Files
-
b953a304ff0248da9907e975568696df_JaffaCakes118.exe windows:4 windows x86 arch:x86
cdfd6f0f5b2f37c458b3c331667eef44
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetModuleHandleA
SuspendThread
LoadLibraryExA
GetTickCount
HeapReAlloc
WaitForMultipleObjects
GlobalUnlock
WaitForSingleObject
lstrlenA
GetCommandLineA
InterlockedExchange
GetAtomNameA
GetVersion
HeapCreate
CompareFileTime
VirtualProtect
GetSystemDefaultLangID
SetConsoleCP
GetStdHandle
GetConsoleCP
user32
IsDialogMessage
InvertRect
DrawCaption
DialogBoxParamA
FillRect
DestroyMenu
SetScrollInfo
DispatchMessageA
CreateIcon
InsertMenuA
DragObject
CreateMenu
GetCursorInfo
CopyImage
GetDlgItem
GetKeyState
GetKeyboardLayout
SetPropA
FindWindowA
SetWindowPos
EnableScrollBar
advapi32
RegCloseKey
RegCreateKeyExA
RegEnumKeyA
RegQueryInfoKeyA
RegEnumValueA
apphelp
ApphelpCheckExe
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 808KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ