Static task
static1
Behavioral task
behavioral1
Sample
c02e363c1019de5117c26ce8c7eb4b85_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c02e363c1019de5117c26ce8c7eb4b85_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c02e363c1019de5117c26ce8c7eb4b85_JaffaCakes118
-
Size
146KB
-
MD5
c02e363c1019de5117c26ce8c7eb4b85
-
SHA1
b3120e8eb1f5172178727a890fb98f210660c8ef
-
SHA256
d19000d9f8fc87a1e9b9bd02a49afa3d2a00aa180ddf4a5bb895677d76183baa
-
SHA512
e4276382e37b29c39e402b26899af4996a6596cd0daf14d2b7193f57f3159254a62c6b89ee777a300abb831b6c8501bba8c934ef9c255cbceb62b49e6eba64f5
-
SSDEEP
3072:u/842e3hMeO3E/DfNWdtwD5n9IkV9mHz4+4YyPdtm3nXH0kUE0kUE0kB:u/jlM93E/hWjwNn9pzsz4+49PT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c02e363c1019de5117c26ce8c7eb4b85_JaffaCakes118
Files
-
c02e363c1019de5117c26ce8c7eb4b85_JaffaCakes118.exe windows:5 windows x86 arch:x86
b1da9f4e5e537ff99ecc01244b096759
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadIconA
IsIconic
GetUpdateRect
BeginPaint
EndPaint
CountClipboardFormats
GetDesktopWindow
EnableScrollBar
GetClientRect
EnableWindow
SetWindowTextA
DialogBoxParamA
gdi32
RectVisible
GetTextColor
ExcludeClipRect
kernel32
HeapDestroy
GetLastError
GetThreadLocale
SetEndOfFile
HeapFree
GetTickCount
GetEnvironmentVariableA
HeapCreate
HeapAlloc
SetFileAttributesA
ExitProcess
GetDateFormatA
GetProcAddress
FreeLibrary
DeleteCriticalSection
LeaveCriticalSection
LoadLibraryA
EnterCriticalSection
InitializeCriticalSection
GetModuleHandleA
WideCharToMultiByte
GetEnvironmentStrings
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ