Static task
static1
Behavioral task
behavioral1
Sample
c7b36bc75ead25ea47dc8a0ce23930ed_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c7b36bc75ead25ea47dc8a0ce23930ed_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c7b36bc75ead25ea47dc8a0ce23930ed_JaffaCakes118
-
Size
174KB
-
MD5
c7b36bc75ead25ea47dc8a0ce23930ed
-
SHA1
1fd1e4870dca1ca3176bb9d09812654c0bbb6801
-
SHA256
40dbb3e3b214c54a9706bbce92fa1d09cf3f9675bd5a86a66a88e301e73f541f
-
SHA512
337925c353e86beee7583a643b9045d019a5eecad4a0987bfbb5516c3aa62e8885bde4de3cadac39ecbc5a4650cc50baea3da6ca7c6227fd8669be5561f7d434
-
SSDEEP
3072:humpfO6zCGsm1pil3WWWS0drNidD3nlLVyIdFqonBq/y4ptvXWN/c8KHFAZW/:H/zCG51pPtNih3xV1aonRBo/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c7b36bc75ead25ea47dc8a0ce23930ed_JaffaCakes118
Files
-
c7b36bc75ead25ea47dc8a0ce23930ed_JaffaCakes118.exe windows:4 windows x86 arch:x86
75eee84fa29a5407768e207407d1115d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetThreadPriority
GetCurrentProcessId
GetLastError
GetCurrentProcess
GetStartupInfoA
FreeLibrary
GetModuleHandleA
GetModuleFileNameA
ExitThread
GetCurrentThreadId
LoadLibraryA
GetCommandLineA
GetProcessTimes
GetTickCount
Sleep
GetProcessHeap
GetCurrentThread
ExitProcess
GetPriorityClass
CloseHandle
user32
GetForegroundWindow
ReleaseDC
GetWindowLongA
IsWindowVisible
GetWindowTextA
UpdateWindow
GetWindowDC
GetFocus
GetSystemMetrics
GetWindow
ShowWindow
OpenIcon
GetActiveWindow
BeginPaint
CreateWindowExA
GetDC
GetWindowTextLengthA
RegisterClassA
GetClassLongA
advapi32
GetUserNameA
IsTextUnicode
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
version
VerQueryValueA
GetFileVersionInfoSizeA
VerLanguageNameA
GetFileVersionInfoA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE