Static task
static1
Behavioral task
behavioral1
Sample
b833e978c58c70dfd609f544e3715b23_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b833e978c58c70dfd609f544e3715b23_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b833e978c58c70dfd609f544e3715b23_JaffaCakes118
-
Size
272KB
-
MD5
b833e978c58c70dfd609f544e3715b23
-
SHA1
dfffa7b2dd8fcc1461a27fddbc9cc75d1c8a6a37
-
SHA256
134afa3a5302edfa9041716fcf55f8b7637f3f14089bfd71cc17f7e83a72ef67
-
SHA512
2c366ca624799c92d5b2d9388c6a9dbbb29f64fdf56aa5bf42aeb60ee04256666e92ef6af8c088170035f972cfcfcb1bf9dff8b09934fe8529a8a1b8af55128a
-
SSDEEP
6144:c/l9SyvGox3/QKtN2A/WlQ/Ousk6e2L1WFEMd:c2b0elQ/qTe2LAFl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b833e978c58c70dfd609f544e3715b23_JaffaCakes118
Files
-
b833e978c58c70dfd609f544e3715b23_JaffaCakes118.exe windows:4 windows x86 arch:x86
1734be3980a4b5da8ed9d2ea1604ffb1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateEventA
CreateProcessA
CreateThread
EnterCriticalSection
ExitThread
GetEnvironmentVariableA
GetStartupInfoA
GetTickCount
GetWindowsDirectoryA
GlobalAlloc
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
OpenEventA
ResumeThread
SetErrorMode
SetEvent
Sleep
WaitForSingleObject
WriteConsoleA
lstrcmpA
lstrlenA
user32
CreatePopupMenu
DestroyWindow
DrawFocusRect
EndPaint
FindWindowW
IsWindowVisible
LoadMenuW
PaintDesktop
PeekMessageW
SetActiveWindow
SetRectEmpty
SetScrollInfo
TranslateMessage
UpdateWindow
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 257KB - Virtual size: 259KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ