Static task
static1
Behavioral task
behavioral1
Sample
b854714215eda5576c5709ef8d185916_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b854714215eda5576c5709ef8d185916_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b854714215eda5576c5709ef8d185916_JaffaCakes118
-
Size
24KB
-
MD5
b854714215eda5576c5709ef8d185916
-
SHA1
95362be75b46a4ddaed3696ad03a4ff8ab18f1a4
-
SHA256
82afe243fc39eb4069ed12daaac585ce90fdd02b888dd76b7ef5f9286fa198bc
-
SHA512
70e83d2cd05d727e66c4cd4e7414fa810bac53f8ea77484e5c1bdabe64ac57644263be41761b0cc6c9771eecfa62aa9b34477bcffb2488cfc220d51b02671b36
-
SSDEEP
384:+iXqXvIj3HjcKtApaN5wC9yoO0i7CC9z9bc80qS5JNRyy2DOIBUcNLV4bo:LXqXmXjLu0wC9C/z9bcJJ5JvyFywLf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b854714215eda5576c5709ef8d185916_JaffaCakes118
Files
-
b854714215eda5576c5709ef8d185916_JaffaCakes118.exe windows:4 windows x86 arch:x86
1e8856d528a7c5b07b1d6a8fc84fa46e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryPerformanceFrequency
lstrcpynW
lstrcmpiA
lstrcmpW
GetModuleFileNameA
lstrcatA
lstrcmpA
QueryPerformanceCounter
GetProcessHeap
SetUnhandledExceptionFilter
LoadLibraryA
lstrcmpiW
lstrcpyA
VirtualAlloc
GetModuleHandleA
VirtualProtect
lstrcmpi
SetEvent
GetCommandLineW
GetACP
WaitForSingleObject
lstrcpyW
LocalFree
lstrcpy
GetCurrentProcessId
GetCurrentProcess
lstrlenA
user32
ChangeMenuW
RegisterClassExW
CheckRadioButton
GetCapture
GetDC
LoadImageW
RegisterClassExA
GetWindowTextLengthW
GetWindowRect
RegisterWindowMessageW
LoadCursorW
LoadIconW
GetWindowTextLengthA
ReleaseDC
GetParent
DestroyWindow
CharUpperA
GetActiveWindow
UpdateWindow
LoadStringW
SetTimer
GetSystemMenu
LoadMenuW
LoadStringA
GetKeyState
GetWindowLongW
GetMenu
GetWindowTextW
MoveWindow
CreateWindowExA
UpdateLayeredWindow
GetWindowTextA
SetCapture
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 812B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ