Static task
static1
Behavioral task
behavioral1
Sample
dc55a0f17b44e73c12e9210731973005_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dc55a0f17b44e73c12e9210731973005_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dc55a0f17b44e73c12e9210731973005_JaffaCakes118
-
Size
38KB
-
MD5
dc55a0f17b44e73c12e9210731973005
-
SHA1
16fdd5511bf0a469d4e9787d7fd9570cf38a85f8
-
SHA256
8d7be13fb1c0d357ad98c09645a7f09c3b2b479e0f1b3af51c1c5c8a9d8aa208
-
SHA512
2d905673464b4b3bf768ef2b938de891de0bd9b627a27c2ea730885a4c4ca7ca98cbec288dbce528638ab772fc4ade2e8608e247631199b17b60774e518adf6c
-
SSDEEP
768:t7/7ZhvfDZfpIwyN3KHKiXBkq5eAK0CGG5rfv7d/6F4GIX:9rlO3KHKiXT5eAngJ7d/6Fu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc55a0f17b44e73c12e9210731973005_JaffaCakes118
Files
-
dc55a0f17b44e73c12e9210731973005_JaffaCakes118.exe windows:4 windows x86 arch:x86
553251ee6e67a8fb68cde9417cedbb78
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObjectEx
WaitForSingleObject
HeapAlloc
GetProcessHeap
ExitProcess
GetProcAddress
LoadLibraryA
HeapFree
user32
GetClassWord
ShowWindowAsync
AnyPopup
SetParent
GetTopWindow
GetForegroundWindow
WaitForInputIdle
GetClassLongA
GetWindowTextLengthA
IsIconic
GetWindowLongA
TileWindows
GetLastActivePopup
IsWindowUnicode
CloseWindow
GetParent
SendMessageA
SetForegroundWindow
wsprintfA
IsZoomed
UnregisterClassA
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 818B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE