Static task
static1
Behavioral task
behavioral1
Sample
f50921030e6ae2af4b7b0651d2e1f9f6_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f50921030e6ae2af4b7b0651d2e1f9f6_JaffaCakes118
-
Size
83KB
-
MD5
f50921030e6ae2af4b7b0651d2e1f9f6
-
SHA1
edd8a450475ac20d0aefec900b42bc855dc2ad7e
-
SHA256
9cf9bc6733b6556c1c5adb6bb36f202ceb3a932318f8acef38ff889d2ead29c9
-
SHA512
00ad2cae0c47e92c87aad285a91965bb2323e96199e6ee883f04846b8d6ffe0cf2dc4d50b22897322d541637c0a9c944765fa79dcedb33b3b91685d189097615
-
SSDEEP
1536:qVoMV5LdRgB/4GPDG0bWX6vcpGE3Z0Sl4JSuZs0St:8gB/4GP60R0pdzl4Pg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f50921030e6ae2af4b7b0651d2e1f9f6_JaffaCakes118
Files
-
f50921030e6ae2af4b7b0651d2e1f9f6_JaffaCakes118.exe windows:4 windows x86 arch:x86
90ad6b1e6fee4251e59db9b2dae1f717
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExpandEnvironmentStringsA
GetLastError
GetModuleHandleA
GetTickCount
GlobalAlloc
GlobalFree
ExitProcess
ReleaseMutex
WriteFile
lstrcatA
lstrcpyA
lstrlenA
CreateThread
CreateMutexA
CloseHandle
CreateFileA
CreateDirectoryA
MultiByteToWideChar
user32
SetWindowLongA
SetWindowTextA
LoadIconA
SendMessageA
GetDlgItem
EndDialog
EnableWindow
CallWindowProcA
GetWindowTextA
MessageBoxA
DialogBoxIndirectParamA
shell32
ShellExecuteA
advapi32
RegOpenKeyA
RegQueryValueExA
RegCloseKey
shlwapi
StrStrA
comctl32
InitCommonControls
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE