Static task
static1
Behavioral task
behavioral1
Sample
c1c5d81630f7475d16a94fd41cfb5575_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c1c5d81630f7475d16a94fd41cfb5575_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c1c5d81630f7475d16a94fd41cfb5575_JaffaCakes118
-
Size
317KB
-
MD5
c1c5d81630f7475d16a94fd41cfb5575
-
SHA1
3ce7b1b06826e5123faf23fdaa8b86cee94dcd1a
-
SHA256
1474f1195c69568997038104de55ad1e1afe54fd29b985bdfded7310eb075857
-
SHA512
3e811f17f7c60fd68a0ab08a8d5fd88da0d7953c9e88cf0e502b7ab4efb1371b9af03d5ca966fbcfdafdc9ccde18f7460cb591ca4057276dc55b56138b04cc1f
-
SSDEEP
6144:+McgzeC/4nXA13lwjbjHMGcnr6hDLCF1bzzFD5BrOSMInBOwUsD1N:+McDnX5Hrlcnr6hDLstzzYSMaBOwUsRN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1c5d81630f7475d16a94fd41cfb5575_JaffaCakes118
Files
-
c1c5d81630f7475d16a94fd41cfb5575_JaffaCakes118.exe windows:4 windows x86 arch:x86
d4d83300ae715d2306ea57217874db62
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteProfileStringA
LoadResource
FreeConsole
LocalFree
GlobalFree
GlobalAddAtomA
GetLastError
EnterCriticalSection
GetStdHandle
SetConsolePalette
DeleteAtom
IsBadCodePtr
GlobalUnlock
RaiseException
GlobalAddAtomA
HeapCreate
LoadLibraryExA
lstrcpyA
GetOEMCP
CloseHandle
VirtualProtect
user32
GetParent
GetWindowTextLengthA
IsIconic
AlignRects
GetClassInfoExA
BeginPaint
GetClassNameA
EndPaint
GetFocus
GetWindow
ValidateRect
GetForegroundWindow
CloseWindow
GetDC
ShowWindow
DrawEdge
GetWindowTextA
GetActiveWindow
ReleaseDC
mprapi
MprAdminUserRead
MprAdminUserClose
MprAdminUserOpen
MprAdminUserWrite
MprAdminUserGetInfo
linkinfo
CreateLinkInfoA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ