Static task
static1
Behavioral task
behavioral1
Sample
b8fc8e1b6ca1e6a938f8b64729c4b8e3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b8fc8e1b6ca1e6a938f8b64729c4b8e3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b8fc8e1b6ca1e6a938f8b64729c4b8e3_JaffaCakes118
-
Size
394KB
-
MD5
b8fc8e1b6ca1e6a938f8b64729c4b8e3
-
SHA1
bbd30a34d6359a060d386672771f6a759a439b26
-
SHA256
3e51d755020f881df24a87543c28d8774b9314ef08df94abe61b1d1faf63e28d
-
SHA512
8bf909e63647de94751ef62851c95c602686c8bace2645bd38597d731d815ea5f9c1f7c2726c4577eede21dd8627361122e9a45351567ad8f8a0dd130141f410
-
SSDEEP
1536:S9vKWYZUbEbDbvwUZl8My1dMT2trv/aUzDrvyhTBZ716m:SVKdeUZlUPZ3aUzDTQ7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8fc8e1b6ca1e6a938f8b64729c4b8e3_JaffaCakes118
Files
-
b8fc8e1b6ca1e6a938f8b64729c4b8e3_JaffaCakes118.exe windows:4 windows x86 arch:x86
fc3061837d98fc20b267de58e062f53f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DefWindowProcA
PostQuitMessage
RegisterClassExA
CreateWindowExA
CreateDialogParamA
kernel32
lstrcatA
VirtualProtectEx
SetThreadContext
GetProcAddress
LoadLibraryExA
GetModuleHandleA
LoadLibraryW
VirtualFreeEx
OpenProcess
GetCurrentProcessId
lstrcpyA
GetCommandLineA
GetModuleFileNameA
CloseHandle
VirtualQueryEx
GetThreadContext
GetCurrentDirectoryA
DuplicateHandle
GetCurrentProcess
GetStdHandle
ResumeThread
GetLastError
msvcrt
_except_handler3
_controlfp
__set_app_type
isalpha
isdigit
memset
memcpy
??3@YAXPAX@Z
printf
_strlwr
strstr
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 387KB - Virtual size: 387KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ