Static task
static1
Behavioral task
behavioral1
Sample
d240c01eeef43be8909a7f6fb672ded9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d240c01eeef43be8909a7f6fb672ded9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d240c01eeef43be8909a7f6fb672ded9_JaffaCakes118
-
Size
31KB
-
MD5
d240c01eeef43be8909a7f6fb672ded9
-
SHA1
68657c78f58db98b3db317acba70d23f6b808e0e
-
SHA256
13a65b0a09b23141df3ce718d7b3792b7d1774bafc40db52bff9b060b141b5c9
-
SHA512
63d1c91314add1a5732d1043caa84d53fa0c2a673c63d622d128c1535c8bb8eda3081b888911c83f108bac604120bc75bf8f82f5c79076b95214fc2f6f3f5b4e
-
SSDEEP
384:z/tVLM5rFscBUyfgyWEqc8JkmEbG98vpijaopk9ssKJdXTHJGHhyQQId1/VXuEta:cx2xyvt8JxuvpxQXXTHJYdQId1cEc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d240c01eeef43be8909a7f6fb672ded9_JaffaCakes118
Files
-
d240c01eeef43be8909a7f6fb672ded9_JaffaCakes118.exe windows:8339 windows x86 arch:x86
9b6b99a376916c36ccfb36ab0219abad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
lstrcmpiW
GetCommandLineA
HeapFree
GetStartupInfoA
SetUnhandledExceptionFilter
WideCharToMultiByte
GetStartupInfoW
ReadFile
GetProcessHeap
InitializeCriticalSection
VirtualAlloc
HeapDestroy
QueryPerformanceCounter
EnterCriticalSection
WideCharToMultiByte
GetCommandLineA
lstrlenW
GetProcAddress
Sleep
MultiByteToWideChar
FreeLibrary
HeapDestroy
LeaveCriticalSection
DeleteCriticalSection
TerminateProcess
WaitForSingleObject
HeapReAlloc
GetStartupInfoW
GetModuleHandleA
lstrcmpiW
UnhandledExceptionFilter
CloseHandle
lstrcpyW
user32
GetParent
SetWindowTextW
CallWindowProcW
ReleaseCapture
SetCursor
TranslateMessage
InvalidateRect
GetSystemMetrics
PeekMessageW
EndDialog
DispatchMessageW
PtInRect
MessageBoxW
OffsetRect
KillTimer
LoadStringA
PeekMessageW
GetMessageW
PostQuitMessage
GetMessageW
DialogBoxParamW
SetCapture
GetDlgItemTextW
CreateDialogParamW
ScreenToClient
SetForegroundWindow
ReleaseCapture
GetSystemMenu
GetDesktopWindow
GetWindowTextW
GetFocus
PostMessageW
GetKeyState
InvalidateRect
LoadStringW
GetWindowRect
GetCursorPos
GetDlgCtrlID
BeginPaint
WinHelpW
SetRect
CreateWindowExW
GetWindowLongW
GetWindowRect
GetSysColor
InvalidateRect
FindWindowW
CreateWindowExW
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ