Static task
static1
Behavioral task
behavioral1
Sample
c02b698ef997c69c56d58a52c03da97d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c02b698ef997c69c56d58a52c03da97d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c02b698ef997c69c56d58a52c03da97d_JaffaCakes118
-
Size
637KB
-
MD5
c02b698ef997c69c56d58a52c03da97d
-
SHA1
2801025a7347fa7b5f8b56d8e41b760c5dc40c92
-
SHA256
21f12e386af2c3d7d092258bae1a051a40777e8c188410857e477e766c7c5596
-
SHA512
a896570be919fe6eff1b567a58391f0fc326eebb5b920f8ba4c70c46b41823eb1b9f2f769aab370fe4004f1f93dbadac3f99fa91525e710e45244115ea5ab7bf
-
SSDEEP
12288:aR1+jSpEoRzUA4Usj5sWUznwnprl76IkNjfCJaqYYNwJAULO4ywEWYd03:AEjSpEoRzU3UEgwnpR76IkEaMNwJAJel
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c02b698ef997c69c56d58a52c03da97d_JaffaCakes118
Files
-
c02b698ef997c69c56d58a52c03da97d_JaffaCakes118.exe windows:4 windows x86 arch:x86
c865c9937b265ceeb299732d72fbf1ac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CompareFileTime
GlobalUnlock
GetAtomNameA
GetProfileIntA
GetModuleHandleA
HeapWalk
FindAtomA
TlsGetValue
GetTickCount
lstrlenA
GetConsoleCP
HeapReAlloc
VirtualProtect
GetACP
LoadLibraryA
TlsFree
GetStdHandle
InterlockedExchange
WaitForSingleObject
GetVersion
user32
SetPropA
DestroyMenu
UpdateWindow
ShowWindow
DispatchMessageA
DialogBoxParamA
ModifyMenuA
LoadIconA
EnableScrollBar
PostQuitMessage
MessageBoxA
TranslateMessage
GetWindowTextA
InflateRect
GetScrollRange
CopyRect
EqualRect
GetSubMenu
PaintDesktop
GetMenuStringA
GetDlgItem
CreateCaret
GetKeyboardLayout
InsertMenuA
PostMessageA
GetMenu
SubtractRect
SetWindowPos
msi
MsiGetMode
MsiEnumClientsA
MsiEnumProductsA
MsiCloseHandle
MsiDoActionA
uxtheme
GetThemeBool
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ