Static task
static1
Behavioral task
behavioral1
Sample
bea54eb6b94a501dec7973c1dfb09131_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bea54eb6b94a501dec7973c1dfb09131_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bea54eb6b94a501dec7973c1dfb09131_JaffaCakes118
-
Size
516KB
-
MD5
bea54eb6b94a501dec7973c1dfb09131
-
SHA1
2a8d3e4dadb7d79d62071928c2d5c78861d95ea2
-
SHA256
13c38819b2d1f3e14b6957d4c8c5a98c27f785c1c37a69d8b5554d044c905dbf
-
SHA512
734c63ba4eb3c3402463e12efc1f0478a99f44e43509e0cac2418b6be8795251015a881522226abe07ece781b036e49d23992aad93be56e55541ae33af2f5e75
-
SSDEEP
12288:rhS4yQB0vLKH0Y+xPbuORdgm85+Pu4WpLDdG:rRZB0MIPbuOzI448
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bea54eb6b94a501dec7973c1dfb09131_JaffaCakes118
Files
-
bea54eb6b94a501dec7973c1dfb09131_JaffaCakes118.exe windows:4 windows x86 arch:x86
071263ac738e1bb66d6be6200449ba31
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenEventW
DosDateTimeToFileTime
GetCurrentThreadId
SetLocaleInfoW
CompareStringA
GetModuleHandleW
DeleteFileA
OpenSemaphoreW
GetACP
SetThreadLocale
DeleteFileW
OpenMutexW
GetCurrentProcess
GetFileType
CopyFileA
LoadLibraryA
CompareStringW
GetCurrentProcessId
OpenEventA
GetFileAttributesA
GetFileSize
GetFileAttributesW
CreateFileA
DuplicateHandle
GetModuleHandleA
CopyFileW
SetLocaleInfoA
GetStartupInfoA
user32
GetWindowTextW
CreateWindowExW
GetClientRect
GetWindowTextLengthA
CreatePopupMenu
FindWindowA
CreateWindowExA
GetWindowTextLengthW
GetWindowTextA
gdi32
CreateSolidBrush
msvcrt
_XcptFilter
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
strcmp
memcpy
printf
strtoul
??2@YAPAXI@Z
??3@YAXPAX@Z
_exit
__setusermatherr
exit
_acmdln
__getmainargs
_initterm
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 496KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ