Static task
static1
Behavioral task
behavioral1
Sample
b89a3afb7df0ab4dd7697fe090427084_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b89a3afb7df0ab4dd7697fe090427084_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b89a3afb7df0ab4dd7697fe090427084_JaffaCakes118
-
Size
17KB
-
MD5
b89a3afb7df0ab4dd7697fe090427084
-
SHA1
180dec9c51a78e6acc7d9ca702e31faaa29e6986
-
SHA256
8587a7ca3568f84a4f87f98015859bfb1344aaf6b40d2ea17243d2471de3f4b4
-
SHA512
feb09f825e0fb2cf30757a034073c587def1e6b09baa221fb097809a0fd2fe8836c9899d5ac5a95490e97ea6088d202493bb96a9e71ed10466f1311b53c28167
-
SSDEEP
384:vPOTgQJO8YqRL35RQw4385dRmd5UWbyt0RWgiRO:+Tx3TJoyvmdlytI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b89a3afb7df0ab4dd7697fe090427084_JaffaCakes118
Files
-
b89a3afb7df0ab4dd7697fe090427084_JaffaCakes118.exe windows:36980 windows x86 arch:x86
058b8430c9f943a3462c38fb5e2cbcb8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
HeapAlloc
VirtualAlloc
GetProcessHeap
VirtualAlloc
GetCurrentProcessId
LocalAlloc
SetLastError
GetVersionExA
HeapFree
LoadLibraryA
SetEvent
GetCommandLineA
InitializeCriticalSection
VirtualFree
HeapDestroy
GetCurrentProcess
GetVersionExA
lstrcmpiW
WideCharToMultiByte
Sleep
GetStartupInfoA
GetCurrentThreadId
SetLastError
SetFilePointer
InitializeCriticalSection
GetCurrentThreadId
SetLastError
GetCurrentThreadId
UnhandledExceptionFilter
CloseHandle
GetModuleHandleW
GetCommandLineW
VirtualAlloc
GetProcAddress
InitializeCriticalSection
VirtualAlloc
GetStartupInfoA
user32
GetWindowTextW
EndPaint
OffsetRect
LoadStringW
GetMessageW
GetMessageW
MapWindowPoints
GetDC
IsIconic
PostMessageW
MessageBoxW
KillTimer
PeekMessageW
KillTimer
GetSystemMetrics
GetDesktopWindow
EndPaint
GetWindowRect
SetForegroundWindow
GetSystemMenu
CreateDialogParamW
MessageBoxW
TranslateMessage
LoadCursorW
PostQuitMessage
SetFocus
GetWindow
SendMessageA
LoadCursorW
PostQuitMessage
SetWindowPos
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ