Static task
static1
Behavioral task
behavioral1
Sample
d52085e62c2a87b7406a9a994e062bd3_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d52085e62c2a87b7406a9a994e062bd3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d52085e62c2a87b7406a9a994e062bd3_JaffaCakes118
-
Size
201KB
-
MD5
d52085e62c2a87b7406a9a994e062bd3
-
SHA1
a1f1813079a54358d1dd955fd7527d2ed440d417
-
SHA256
1bec60499f5ea1382cda1ac9749438991cf3e957f6679c09d43ad325ee540f0d
-
SHA512
1645147795af6af867b6521801a0209620f241d9e584bc35f5e1bdbad27e7f31588988c243ce0039616af1f16dbb1405419dbfe2cbfe490a5f62cd96ce3463e6
-
SSDEEP
3072:9oII5+V0ovXfsGskRUJupzg79zJc1uF8XTCXXsJgIL0fdxy9K6JrcRlQciTokoPt:9o8tXfsGyuI4gF8ccJgvfy03fNbPZD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d52085e62c2a87b7406a9a994e062bd3_JaffaCakes118
Files
-
d52085e62c2a87b7406a9a994e062bd3_JaffaCakes118.exe windows:4 windows x86 arch:x86
8765a43c66d3c39da79197b0c7555321
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetTapePosition
InterlockedExchange
ClearCommError
Sleep
GetLocalTime
GetWindowsDirectoryA
EnumResourceNamesA
GetVersion
FatalExit
FindClose
GetCurrentProcessId
FindFirstFileA
ole32
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID
user32
IsWindow
SetWindowLongA
SetWindowPos
SetCursor
MoveWindow
GetWindowLongA
GetDC
GetDlgItem
ReleaseDC
FillRect
GetSysColor
GetWindowInfo
LoadCursorA
ReleaseCapture
SetCapture
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
winmm
mciSendCommandA
sndPlaySoundA
oleacc
LresultFromObject
CreateStdAccessibleObject
shell32
SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation
Sections
.text Size: 174KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lib Size: 512B - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ