Static task
static1
Behavioral task
behavioral1
Sample
b7b2a0f44ebede27ccfce08544c75836_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b7b2a0f44ebede27ccfce08544c75836_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b7b2a0f44ebede27ccfce08544c75836_JaffaCakes118
-
Size
320KB
-
MD5
b7b2a0f44ebede27ccfce08544c75836
-
SHA1
7147489b11c5ae9bc1ab7364d897d539f35856b8
-
SHA256
9983d7fb57e771a26a20ac71b33c981b96ec583f4c4521d4de87aafbfff14c78
-
SHA512
10928f8f4b68f310d2fe810cc3e95370b3b544899de3ed6bec3441b70be2fdab95bd7f52f98bb4c34b8bc80877875755da082c398ad10b0a82737185805dfc77
-
SSDEEP
6144:N+kht377UyZ/CcmzRmwkCLSvGlTceQUtloiGnB3jtlS3XRDeuyrNkiH6:YW37JqUwkZGEUDYZGXRDnW6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7b2a0f44ebede27ccfce08544c75836_JaffaCakes118
Files
-
b7b2a0f44ebede27ccfce08544c75836_JaffaCakes118.exe windows:4 windows x86 arch:x86
16ac6793f57416c09a16c84807248971
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
GetCommConfig
CreateFileMappingA
HeapDestroy
GetACP
IsDebuggerPresent
VirtualProtect
LoadLibraryExA
GetCurrentProcessId
GetTapeStatus
GetProcessVersion
GetCurrentThread
CreateHardLinkA
GetEnvironmentStringsA
WaitForSingleObject
GetLogicalDrives
GetModuleHandleA
GetTimeFormatA
DeleteAtom
GetStdHandle
InterlockedExchange
user32
wsprintfA
GetDlgItem
GetWindow
FrameRect
GetCursorPos
SetForegroundWindow
GetParent
BeginPaint
EndPaint
SetActiveWindow
ShowWindow
GetClassNameA
GetFocus
FillRect
DrawTextA
GetTitleBarInfo
GetWindowTextLengthA
ReleaseDC
DragDetect
advapi32
RegCloseKey
RegCreateKeyA
RegSetValueExA
RegFlushKey
RegEnumKeyA
setupapi
SetupCloseLog
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 720KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ