Static task
static1
Behavioral task
behavioral1
Sample
c0661451b370b29c1e32956604268d81_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c0661451b370b29c1e32956604268d81_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c0661451b370b29c1e32956604268d81_JaffaCakes118
-
Size
61KB
-
MD5
c0661451b370b29c1e32956604268d81
-
SHA1
b8f7e437e8f8d29594e638c29fe46e1f27364816
-
SHA256
d11f41df7e84e9466c2fc0dd30c3273bae38759d5894e81f7a2760f09b939cc0
-
SHA512
19b8d490a09488c29bc9a23c03bcb901e0a0ba8a0b201d3dbb303778a076f9bda7748e957ca245467b3e5a8eed242fe7e40a813363d929815893d04f79c9f98d
-
SSDEEP
768:UVUiIft99qZzc4f0dDv/g40cCGyBazZHxBalpibL2HqhnZWoY63NFZa/QqBmGDe0:xbizTf0dbF0nGyonslseHAgofjZanB91
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0661451b370b29c1e32956604268d81_JaffaCakes118
Files
-
c0661451b370b29c1e32956604268d81_JaffaCakes118.exe windows:4 windows x86 arch:x86
5b1d0737b180c5d0fe0bb5f1ef34873c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
EnumResourceTypesA
ExitProcess
ExitThread
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
FindResourceA
FindResourceExA
FreeLibrary
FreeResource
GetACP
GetCommandLineA
GetConsoleCursorInfo
GetConsoleMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileType
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetNumberOfConsoleInputEvents
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetThreadPriority
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadResource
LocalAlloc
LocalFree
LockResource
MultiByteToWideChar
ReadConsoleInputA
ReadFile
ReadProcessMemory
ResetEvent
ResumeThread
ScrollConsoleScreenBufferA
SetConsoleCursorPosition
SetConsoleOutputCP
SetEvent
SetFilePointer
SetLastError
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
TerminateThread
TlsAlloc
TlsGetValue
TlsSetValue
WaitForSingleObject
WideCharToMultiByte
WriteConsoleOutputAttribute
WriteConsoleOutputCharacterA
WriteFile
oleaut32
SysAllocStringLen
SysFreeString
SysReAllocStringLen
user32
CharLowerBuffW
CharUpperBuffW
MessageBoxA
SetActiveWindow
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.stab Size: 276B - Virtual size: 276B
IMAGE_SCN_MEM_DISCARDABLE
.stabstr Size: 117B - Virtual size: 117B
IMAGE_SCN_MEM_DISCARDABLE