Static task
static1
Behavioral task
behavioral1
Sample
0923cf6b928bc83169ec6a0fc2a34f0a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0923cf6b928bc83169ec6a0fc2a34f0a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0923cf6b928bc83169ec6a0fc2a34f0a_JaffaCakes118
-
Size
32KB
-
MD5
0923cf6b928bc83169ec6a0fc2a34f0a
-
SHA1
8a3a8462a288071b16b33676355474c5e406cb07
-
SHA256
7dca9b9e9751c44edd989a52a0f8c9a70e5b59076925748f44bfd9265dc50f31
-
SHA512
351430f10beabedf9c66a9b682e2d1c3f06609790b3dc3263650d6bea465a743a45031f15f4d45a230c36fde0a7b2d5fe14e7b6768406b11f1168c708a324fb8
-
SSDEEP
768:sUU0/lIRrk0Sbnde6Bnim1XP4ah1ZREClaY75lpgsSha:rx/eRrmbnde6Bnz1f3EMX5bgtha
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0923cf6b928bc83169ec6a0fc2a34f0a_JaffaCakes118
Files
-
0923cf6b928bc83169ec6a0fc2a34f0a_JaffaCakes118.exe windows:4 windows x86 arch:x86
a13977ca99684271b511f8d72778bc9e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
GetAtomNameA
SuspendThread
WaitForSingleObject
SearchPathA
SetConsoleCP
GetSystemDefaultLangID
GlobalUnlock
VirtualProtect
CloseHandle
InterlockedExchange
GetVersion
GetModuleHandleA
GetStdHandle
lstrlenA
GetConsoleCP
CompareFileTime
GetTickCount
HeapCreate
WaitForMultipleObjects
GetCommandLineA
user32
SetWindowPos
FindWindowA
DestroyMenu
SetPropA
CreateIcon
IsDialogMessage
CreateCursor
DispatchMessageA
EnableScrollBar
DialogBoxParamA
GetCursorInfo
GetKeyState
InsertMenuA
SetScrollInfo
GetDlgItem
CopyImage
DispatchMessageA
DrawCaption
CreateMenu
InvertRect
DragObject
GetKeyboardLayout
MessageBoxA
advapi32
RegCreateKeyExA
RegEnumValueA
RegEnumKeyA
RegQueryInfoKeyA
RegCloseKey
uxtheme
GetThemeColor
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 600KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ