Static task
static1
Behavioral task
behavioral1
Sample
be3cd23d3411c96adddf030c60d0a454_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
be3cd23d3411c96adddf030c60d0a454_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
be3cd23d3411c96adddf030c60d0a454_JaffaCakes118
-
Size
16KB
-
MD5
be3cd23d3411c96adddf030c60d0a454
-
SHA1
e2382912063ce71ff6da2646b3b33f5db5a4718c
-
SHA256
5ca2fb3665e8689385218fdf799376f7ccb837a5573b2f1c27434df0beed3cbc
-
SHA512
63074c1826a94891728aad5ff281781cabf414d0106620f9f65bb0443fb7019272ba8bd870dc6595bdcf546de7320c5de183885bc312c411de199dc0fc6621c8
-
SSDEEP
192:37HFPyghijwAlohzk6TQYRd0h13fzDk0yvlre5QZk5M2vCHsbfrEsFr:rHFNughlrAfPk0gZe5QZkaCCHsjt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be3cd23d3411c96adddf030c60d0a454_JaffaCakes118
Files
-
be3cd23d3411c96adddf030c60d0a454_JaffaCakes118.exe windows:5 windows x86 arch:x86
aee3ac8d77d85a67a6a1c466ba4ab579
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
user32
SetWindowPos
CopyAcceleratorTableA
LoadIconA
DdeDisconnectList
DefDlgProcA
DestroyMenu
CreateDesktopW
CreateWindowExA
gdi32
GetDCPenColor
GetROP2
FrameRgn
PaintRgn
EnumFontFamiliesExW
GetBitmapBits
CreateEllipticRgnIndirect
SetMapperFlags
StartPage
RemoveFontResourceExA
MoveToEx
GetTextMetricsW
shlwapi
StrRChrIA
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CTX Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 400B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ