Static task
static1
Behavioral task
behavioral1
Sample
c816606c718a5739e8ebdfca41c1785c_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
c816606c718a5739e8ebdfca41c1785c_JaffaCakes118
-
Size
16KB
-
MD5
c816606c718a5739e8ebdfca41c1785c
-
SHA1
eedb35318b0ecc30ddc6c78ab01ed9435b543d69
-
SHA256
06607f54aa2b36a41ee3563a6b57ea1ebbd3a2665e54fbe6757ef2484926b3fe
-
SHA512
5149a4a8b81f9a4911d73a12f91153b4b3f8d4832e7124f1a140e26325c1b12ae596e52e722b791258d17c74bb8ac858c2719f74772c2d18e81af073e02eb8cb
-
SSDEEP
192:6OGKRB2WfbHDxc1ebkO/NE1WD5Gqy0ms5VVdIR5hhi+Wugv8:UKRBSebkoNz7575VVd0ri+7gv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c816606c718a5739e8ebdfca41c1785c_JaffaCakes118
Files
-
c816606c718a5739e8ebdfca41c1785c_JaffaCakes118.exe windows:4 windows x86 arch:x86
f926b4851527674ee1a6b62767dbffea
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForMultipleObjects
InterlockedExchange
GetTickCount
GetAtomNameA
CompareFileTime
VirtualProtect
lstrlenA
GetCommandLineA
WaitForSingleObject
GetConsoleDisplayMode
GetVersion
HeapCreate
ResumeThread
GetModuleHandleA
LoadLibraryExA
GlobalSize
SetLastError
GetUserDefaultLangID
HeapReAlloc
GetConsoleCP
GlobalUnlock
user32
GetTitleBarInfo
ReleaseDC
BeginPaint
EndPaint
SetForegroundWindow
CreateIcon
DragDetect
DrawTextA
GetDC
ShowWindow
GetFocus
FillRect
GetParent
GetClassNameA
AnyPopup
GetCursorPos
wsprintfA
FrameRect
GetWindow
rastapi
PortClose
AddPorts
DeviceDone
DeviceConnect
DeviceListen
quartz
DllGetClassObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ