Static task
static1
Behavioral task
behavioral1
Sample
ff7cf9e25a6f2c9afd66bc8e35acbb92_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ff7cf9e25a6f2c9afd66bc8e35acbb92_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ff7cf9e25a6f2c9afd66bc8e35acbb92_JaffaCakes118
-
Size
82KB
-
MD5
ff7cf9e25a6f2c9afd66bc8e35acbb92
-
SHA1
20ed536ff0ff0f78235be1d2939f3b38413d87dc
-
SHA256
af8173323ec41ec9d92966de00ceaa6f1f1b7ff520b4d47c94302eb7dd8458cf
-
SHA512
da2b1c49378055d0b1cda223295d3d793718fa97c732e2da4ff1f45d82b37d044cadf0ca7ae89b3089149180d48302610484229c048859de224cfbe159addfaf
-
SSDEEP
768:t8HbT4Ba23654n1ye/hL8IeTHh48ebT4Ba23654n1ye/hL8IeTHh6Ve1ODJjeo4w:tcj54n7/9neT+Nj54n7/9neT9IdjezsT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff7cf9e25a6f2c9afd66bc8e35acbb92_JaffaCakes118
Files
-
ff7cf9e25a6f2c9afd66bc8e35acbb92_JaffaCakes118.exe windows:4 windows x86 arch:x86
64332f80c52df7096539364b46cb5d03
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetStdHandle
LoadLibraryExW
lstrlenA
ResumeThread
FreeEnvironmentStringsA
GlobalLock
OpenMutexA
GetLastError
OpenMutexA
GlobalUnlock
CreateEventA
GetSystemTime
LocalFree
FindClose
GetACP
FreeConsole
IsBadReadPtr
VirtualProtectEx
CloseHandle
user32
GetComboBoxInfo
ClipCursor
GetDlgItemTextA
LoadCursorA
EndDialog
IsMenu
GetSubMenu
CreateWindowExA
GetMessageA
GetMessageA
SetFocus
IsIconic
DialogBoxParamA
MessageBoxA
msasn1
ASN1BERDecCheck
ASN1BEREncNull
ASN1DecAlloc
ASN1BEREncOpenType
ASN1BERDecBool
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 75KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE