Static task
static1
Behavioral task
behavioral1
Sample
c894f8b423780a7093d29e3e0b44e65e_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
c894f8b423780a7093d29e3e0b44e65e_JaffaCakes118
-
Size
312KB
-
MD5
c894f8b423780a7093d29e3e0b44e65e
-
SHA1
a60f3e86ffae61a8962bae03ba45835236501ee6
-
SHA256
a28cdc40aa8bc472b4fb72d3eda982a5ee4b3c11017a1bca317eff1d598a3270
-
SHA512
4762bb3507dd166cc3e7efc2c1fd92c6290e2b9e77ef3075ce8f36d0b513b8802d218fb4ee346cc8c858d90f7c32d666a28b73fc2d058a59d517122161af9b59
-
SSDEEP
6144:DbcTRLFhpIY/houf4qLAdlwzsT8pdUNhcxckiWZe6YB3W2viZsSQ7:DwlxhikhoS4qL6iwTayNhcwaSBGZmS6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c894f8b423780a7093d29e3e0b44e65e_JaffaCakes118
Files
-
c894f8b423780a7093d29e3e0b44e65e_JaffaCakes118.exe windows:4 windows x86 arch:x86
c008215dc443fa4019d1896dd0181784
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateHardLinkA
VirtualAlloc
GetModuleHandleA
GetOEMCP
GetProfileStringA
ExitProcess
GlobalLock
FindAtomA
GetStdHandle
EnterCriticalSection
ClearCommBreak
CloseHandle
GetUserDefaultLangID
GetTapeStatus
CreateJobSet
FormatMessageA
GetProcessHeap
GlobalFlags
GetCommState
GetVolumePathNameA
GlobalFree
user32
ValidateRect
GetWindow
RegisterClassA
GetWindowTextLengthA
GetParent
GetClassInfoExA
ShowWindow
ReleaseDC
GetForegroundWindow
IsIconic
GetWindowTextA
CloseWindow
DrawEdge
EndPaint
GetFocus
GetClassNameA
BeginPaint
GetActiveWindow
GetDC
gdi32
GetCharWidthA
CreateDCA
CombineRgn
CreateDIBitmap
GetColorSpace
lpk
LpkInitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ