Static task
static1
Behavioral task
behavioral1
Sample
b9972048ff0b4779f89fece55fa852ad_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b9972048ff0b4779f89fece55fa852ad_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b9972048ff0b4779f89fece55fa852ad_JaffaCakes118
-
Size
120KB
-
MD5
b9972048ff0b4779f89fece55fa852ad
-
SHA1
221d2445ee73f27b64576ef9d80102e0a50d55ae
-
SHA256
17ee9eb7b4eb41e23e1de94f57ac98dd7e429fefbfc50336caa765ae43524c41
-
SHA512
c540d3d13653d89bd60a152d9b06c010d94d0f69047ff6e5d6b3203e3732be5a80b4a0d5ff243e192d3f2861de1294f7bf662986615538afdd85cc2bc5afc7fd
-
SSDEEP
1536:w00Dm3KkMcotFKd0EorG8+tSJQkcCJQ1UfMut4Po4JWvf938On87kZV:w00DtkQMdU9+hkcC21UEut4P6jn/r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9972048ff0b4779f89fece55fa852ad_JaffaCakes118
Files
-
b9972048ff0b4779f89fece55fa852ad_JaffaCakes118.exe windows:4 windows x86 arch:x86
f9996fbbc7213686cc1b7a3548771f04
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
GetModuleHandleA
GetConsoleCP
CompareFileTime
SuspendThread
WaitForMultipleObjects
InterlockedExchange
CloseHandle
GetAtomNameA
GetVersion
HeapReAlloc
VirtualProtect
SetConsoleCP
LoadLibraryExA
GlobalUnlock
WaitForSingleObject
GetStdHandle
GetSystemDefaultLangID
GetTickCount
lstrlenA
GetCommandLineA
user32
SetScrollInfo
DestroyMenu
FindWindowA
EnableScrollBar
SetPropA
GetCursorInfo
DrawCaption
IsDialogMessage
FillRect
InsertMenuA
SetWindowPos
InvertRect
GetDlgItem
GetKeyState
CreateIcon
DialogBoxParamA
DispatchMessageA
CreateMenu
DragObject
CopyImage
GetKeyboardLayout
advapi32
RegEnumKeyA
RegEnumValueA
RegQueryInfoKeyA
RegCreateKeyExA
RegCloseKey
apphelp
ApphelpCheckExe
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 796KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ