Static task
static1
Behavioral task
behavioral1
Sample
c8416447261a00bc3a4b7c2815d36ea3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c8416447261a00bc3a4b7c2815d36ea3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c8416447261a00bc3a4b7c2815d36ea3_JaffaCakes118
-
Size
244KB
-
MD5
c8416447261a00bc3a4b7c2815d36ea3
-
SHA1
5638fab21fe7c1807d8d07d076ce7aea050c8e29
-
SHA256
419e86843feffeafe47f436010a7cad61c47052dc6fbaa4dc6f4f7584a5d17ed
-
SHA512
63121f625bb8819874161498ebcdc93acf11f0a1371fc04d0c5791522a5671033bfa457b886b9d69d869af4947ac4328d0b5e6d9684f3ae6c099b6d667080007
-
SSDEEP
6144:44spes4G1+JW4o1ISKEEoR9tUAxqcLjsj5sWUzrbwnVe:aR1+jSpEoRzUA4Usj5sWUznwnI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8416447261a00bc3a4b7c2815d36ea3_JaffaCakes118
Files
-
c8416447261a00bc3a4b7c2815d36ea3_JaffaCakes118.exe windows:4 windows x86 arch:x86
c865c9937b265ceeb299732d72fbf1ac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CompareFileTime
GlobalUnlock
GetAtomNameA
GetProfileIntA
GetModuleHandleA
HeapWalk
FindAtomA
TlsGetValue
GetTickCount
lstrlenA
GetConsoleCP
HeapReAlloc
VirtualProtect
GetACP
LoadLibraryA
TlsFree
GetStdHandle
InterlockedExchange
WaitForSingleObject
GetVersion
user32
SetPropA
DestroyMenu
UpdateWindow
ShowWindow
DispatchMessageA
DialogBoxParamA
ModifyMenuA
LoadIconA
EnableScrollBar
PostQuitMessage
MessageBoxA
TranslateMessage
GetWindowTextA
InflateRect
GetScrollRange
CopyRect
EqualRect
GetSubMenu
PaintDesktop
GetMenuStringA
GetDlgItem
CreateCaret
GetKeyboardLayout
InsertMenuA
PostMessageA
GetMenu
SubtractRect
SetWindowPos
msi
MsiGetMode
MsiEnumClientsA
MsiEnumProductsA
MsiCloseHandle
MsiDoActionA
uxtheme
GetThemeBool
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ