Static task
static1
Behavioral task
behavioral1
Sample
c94c6377baddb7f379dd331654795c4e_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
c94c6377baddb7f379dd331654795c4e_JaffaCakes118
-
Size
1.4MB
-
MD5
c94c6377baddb7f379dd331654795c4e
-
SHA1
2c7d045e278088ecabd2a7dea1bf63692c83d2e6
-
SHA256
6f62f4330762c638dc211fc70bfae6049e08c68131223e774e6f3e120978a7f9
-
SHA512
00000cf6880dbea86ad6847040df8a50753931ebc419f820ac352ba5b48156ae3330eb8791dcb0c5b4cac6ffa9c567dfdf246dfd7320cab026846483ff97bf26
-
SSDEEP
24576:D7R0jRpJrqSPrlgq0NBVGYKXlF+L1iDxBAV0lcB5vFGcjaCY4bh4XnevK:D7R0jP5PrlgJNBV6+N5v3+S4L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c94c6377baddb7f379dd331654795c4e_JaffaCakes118
Files
-
c94c6377baddb7f379dd331654795c4e_JaffaCakes118.exe windows:4 windows x86 arch:x86
ca1c7853b29bed02bab5cfa77f707413
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
DeleteCriticalSection
TlsSetValue
lstrlenW
Sleep
user32
GetKeyboardType
WindowFromPoint
advapi32
RegQueryValueExA
RegSetValueExA
oleaut32
SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
ImageList_SetIconSize
imm32
ImmSetCompositionWindow
Sections
.text Size: 156KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE