Static task
static1
Behavioral task
behavioral1
Sample
d04ea89363c52b2984c09ad493ce3385_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d04ea89363c52b2984c09ad493ce3385_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d04ea89363c52b2984c09ad493ce3385_JaffaCakes118
-
Size
288KB
-
MD5
d04ea89363c52b2984c09ad493ce3385
-
SHA1
b0a0b72a71520d3e84789abfe9a1bde45e2acd48
-
SHA256
a8bcbd9e8ad0b458b692d7194c05872966bc24a43ef234435befcf7cab760292
-
SHA512
0f42bef9fbd814f29db79351a7356e9536b115bb14736be52666094ff08b46ca5df09405c55421abc70e6f8c3016dc5ce690b1781fa69beebc6270881f395e2a
-
SSDEEP
6144:BH2sKaSd4Op/Rmh7s2lWAhKcJdlpfjY7R96Qv:BW80VQ7XhjMl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d04ea89363c52b2984c09ad493ce3385_JaffaCakes118
Files
-
d04ea89363c52b2984c09ad493ce3385_JaffaCakes118.exe windows:4 windows x86 arch:x86
29ad4e924ca10da0c66530ec12ef33a2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateEventA
CreateThread
EnterCriticalSection
ExitThread
FindFirstFileA
GetDateFormatA
GetFileSize
GetLocaleInfoA
GetProcAddress
GetSystemDirectoryA
GetTickCount
GetWindowsDirectoryA
GlobalAlloc
GlobalUnlock
InitializeCriticalSection
InterlockedExchange
LeaveCriticalSection
LoadLibraryA
LocalFree
ReadFile
SetEvent
SetLastError
Sleep
TerminateProcess
UnmapViewOfFile
WaitForSingleObject
WriteConsoleA
lstrcpyA
lstrlenA
user32
FindWindowW
GetAsyncKeyState
GetClassNameW
GetDlgItem
GetForegroundWindow
GetMenuDefaultItem
GetWindowRect
InflateRect
PeekMessageW
RegisterClassW
SendMessageW
SetCursorPos
SetScrollInfo
SetScrollPos
TranslateMessage
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 273KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ