Static task
static1
Behavioral task
behavioral1
Sample
0200a7366e39f510151c531f8e9ea1bf_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0200a7366e39f510151c531f8e9ea1bf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0200a7366e39f510151c531f8e9ea1bf_JaffaCakes118
-
Size
362KB
-
MD5
0200a7366e39f510151c531f8e9ea1bf
-
SHA1
84d621881378ff358439d7794e7c5ceace7025e9
-
SHA256
fee619e24c5a975340cd36044e660321ed2fe6faea2aa3cd870b8404e7efcf24
-
SHA512
bbef8f8ec691014e4810291c689628ba7392dfa18e1967bbfa067e7dcd5b8d19859800d8c112cb713788301dc83635c1ba48c4bb7f60a31f6bc6e9819ae92f82
-
SSDEEP
6144:hZTyQ4p5rptVLMztkVwZcl2OzZ+hz06PiAsJXtfvWt73+mBGDbDvDhwufZIQo/uR:LeQ4xtVLNV8GZmz1PiAsJ2+bDv1fZI0R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0200a7366e39f510151c531f8e9ea1bf_JaffaCakes118
Files
-
0200a7366e39f510151c531f8e9ea1bf_JaffaCakes118.exe windows:4 windows x86 arch:x86
e90208dd8e9986903259e8bb35a09441
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapDestroy
FreeConsole
GetCommandLineA
GlobalMemoryStatus
GetSystemTime
GetTapeStatus
IsDebuggerPresent
GetTimeFormatA
GetModuleHandleA
ResumeThread
GlobalSize
VirtualProtect
GetACP
WaitForSingleObject
lstrlenA
PeekConsoleInputA
InterlockedExchange
HeapCreate
GetUserDefaultLCID
LoadLibraryExA
GetCurrentProcessId
user32
GetDC
FrameRect
AnyPopup
wsprintfA
DragDetect
SetForegroundWindow
GetFocus
GetParent
GetTitleBarInfo
GetWindow
GetCursorPos
CreateIcon
ReleaseDC
EndPaint
GetClassNameA
BeginPaint
ShowWindow
FillRect
DrawTextA
ntshrui
IsFolderPrivateForUser
GetLocalPathFromNetResourceA
GetNetResourceFromLocalPathA
DllGetClassObject
SetFolderPermissionsForSharing
hnetcfg
DllGetClassObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 912KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ