Static task
static1
Behavioral task
behavioral1
Sample
b964e2389137e4b3030d0eb659b4aab5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b964e2389137e4b3030d0eb659b4aab5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b964e2389137e4b3030d0eb659b4aab5_JaffaCakes118
-
Size
58KB
-
MD5
b964e2389137e4b3030d0eb659b4aab5
-
SHA1
8314470ab5f0ad474a145bde71fd516622ad20ab
-
SHA256
bd7c23c08e5d31debb5964668185566a6e25aa859388740c0ead3fd244f8b722
-
SHA512
8b707a903a368baf95ab447a8c4cea5449d62db7f162b149b1cfe0873d9cd00d29e9ed7d62c025166364200286fba0e5c6fcabe46f90f91771cad36a55a98f37
-
SSDEEP
768:0sNhTqJjfzyjagb4K4RVjfARZXvuJVku/EN+OOJ0ne8Y3gCNlED1IqNFwiq8Ds:0SkjfzFg0Nr7AL6SueE0zyNED1Xr/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b964e2389137e4b3030d0eb659b4aab5_JaffaCakes118
Files
-
b964e2389137e4b3030d0eb659b4aab5_JaffaCakes118.exe windows:4 windows x86 arch:x86
83702dea2949b6ae59cc95a9a4519aca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
ReleaseMutex
GetProcessHeap
GetModuleHandleA
GetExitCodeProcess
TlsGetValue
lstrlenW
TlsAlloc
CreateFileA
GetCurrentThreadId
DeleteAtom
HeapCreate
GlobalFree
CreateMutexA
GetEnvironmentVariableA
GlobalUnlock
GetStdHandle
CloseHandle
FindResourceA
LoadLibraryExA
user32
CheckRadioButton
GetCaretPos
GetDlgItem
DrawEdge
GetDC
CreateWindowExA
IsWindow
DrawMenuBar
DispatchMessageA
FillRect
CreateMenu
CallWindowProcA
SetFocus
rsaenh
CPDecrypt
CPHashData
CPDeriveKey
CPGenKey
CPSignHash
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
egzvbgf Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE