Static task
static1
Behavioral task
behavioral1
Sample
c0fc7cb67cee6fb6a18965668b380332_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c0fc7cb67cee6fb6a18965668b380332_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c0fc7cb67cee6fb6a18965668b380332_JaffaCakes118
-
Size
27KB
-
MD5
c0fc7cb67cee6fb6a18965668b380332
-
SHA1
2722f2e236a9f9c9ccbdb66f5d275a988d3f1a58
-
SHA256
5e7a98874df9c07d5ea4baa6abedd8f19192ecfd3e45b898be38eade900a8354
-
SHA512
6069c6f039bf6ea6e89cf452692c143d5d0efc0d61f9d9293759f653c77596e35d90f15ab5bf9776356c2f08b4d7ae20a41e7dfcc595a5863ea84cdb96bc5185
-
SSDEEP
192:ywX77xbjhOz8N8kzRJblZavhbhgBaNjQI7tBGgNHtK7TCc:PPtIzk9Pcvhbhg8tQIDGgNNK7TCc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0fc7cb67cee6fb6a18965668b380332_JaffaCakes118
Files
-
c0fc7cb67cee6fb6a18965668b380332_JaffaCakes118.exe windows:4 windows x86 arch:x86
131a89671a2df7db1aa82b33dbe2ecb8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetShortPathNameA
GetFileAttributesA
MulDiv
GetStartupInfoA
lstrcpyA
GetProcAddress
QueueUserAPC
lstrlenA
_lclose
GetModuleFileNameW
GetModuleHandleW
GetNumberFormatA
GetEnvironmentVariableW
GetProfileStringW
GetModuleHandleW
Beep
CreateNamedPipeW
GetCurrentThreadId
TerminateProcess
GetLongPathNameW
GetCurrencyFormatW
lstrcmpi
lstrlen
user32
CreateWindowExA
LoadIconW
IsDlgButtonChecked
DispatchMessageA
GetParent
GetDlgItem
EnableWindow
DialogBoxParamA
KillTimer
LoadCursorW
PeekMessageA
SetTimer
DestroyWindow
PostQuitMessage
SetWindowLongW
CreateWindowExW
GetWindowRect
SetCursor
SetWindowTextW
SendMessageA
IsDlgButtonChecked
GetSysColor
TranslateMessageEx
PeekMessageW
GetClientRect
SetDlgItemInt
SetForegroundWindow
PostMessageW
LoadIconW
InvalidateRect
wsprintfA
CharNextExA
LoadCursorA
SetWindowPos
GetWindowLongA
SetDlgItemTextA
CharNextA
GetSysColorBrush
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 860B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ