Static task
static1
Behavioral task
behavioral1
Sample
c768bbb97b876ad3c2cc07507c8f3637_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c768bbb97b876ad3c2cc07507c8f3637_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c768bbb97b876ad3c2cc07507c8f3637_JaffaCakes118
-
Size
150KB
-
MD5
c768bbb97b876ad3c2cc07507c8f3637
-
SHA1
eaf3e5769d19cf2d2bfa71a79e78155dac184615
-
SHA256
3f941def4c3981ced59c7185c5c0d1779d6b9d476d850fba550e53969af16a6e
-
SHA512
0d4f4fb2b7d088f69d7c296e46365e5425d5fab9a72a64477f2a8f0a20828fec7df2ec911294c8981c0b9f490ae7b1f688064769e33f621201aa4b45589fb0fe
-
SSDEEP
3072:Fmn8D5BMgSt6938QyNvWfWcZcGAHciJfykrCJl2ddF:FY8NBMFt2s9vWfWLmeqkrCJwddF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c768bbb97b876ad3c2cc07507c8f3637_JaffaCakes118
Files
-
c768bbb97b876ad3c2cc07507c8f3637_JaffaCakes118.exe windows:4 windows x86 arch:x86
cfb893102dd0d0cb258d5b3cba3c0edd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
GetConsoleCP
GetModuleHandleA
SetLastError
LoadLibraryExA
WaitForSingleObject
LocalLock
HeapCreate
PeekConsoleInputA
GetUserDefaultLCID
GetSystemTime
GlobalSize
GetCommandLineA
VirtualProtect
ResumeThread
LockResource
GetAtomNameA
GetACP
TlsGetValue
InterlockedExchange
lstrlenA
user32
FrameRect
FillRect
CreateIcon
GetWindow
ShowWindow
wsprintfA
DrawTextA
SetForegroundWindow
GetTitleBarInfo
EndPaint
BeginPaint
GetClassNameA
DragDetect
GetParent
GetCursorPos
GetDC
ReleaseDC
GetFocus
AnyPopup
ntshrui
GetLocalPathFromNetResourceA
DllGetClassObject
SetFolderPermissionsForSharing
DllCanUnloadNow
GetNetResourceFromLocalPathA
wshtcpip
WSHIoctl
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 628KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ