Static task
static1
Behavioral task
behavioral1
Sample
0d3bda79ecf3fcb7b584d91067e06050_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0d3bda79ecf3fcb7b584d91067e06050_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0d3bda79ecf3fcb7b584d91067e06050_JaffaCakes118
-
Size
636KB
-
MD5
0d3bda79ecf3fcb7b584d91067e06050
-
SHA1
1e1987baa3ff66366368f21ed3eba3bbee522b8a
-
SHA256
d66ea43d4bb6dc291ce183a9f9d6a227d5b1e4c0c3464adc58b3dfad40ac01db
-
SHA512
4811f9b85f8bdc5b9b53c3a0132a041659e25cda07ab0fad3c201c08de68ba3bfcc65424e66ad15407d0a6717c1fde010fb26d91562a295d4dd2c9681027cd6c
-
SSDEEP
12288:+0cwB2In0wrb60Y9ek+xN33A9T1xITgrY5Lqnce7lEvXb+6G66RmBpky:AV0e0uEbqxpk55eJyXCN61Bd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d3bda79ecf3fcb7b584d91067e06050_JaffaCakes118
Files
-
0d3bda79ecf3fcb7b584d91067e06050_JaffaCakes118.exe windows:4 windows x86 arch:x86
2c8c359b1b36341cef5197d43ff52324
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SuspendThread
GetStdHandle
GetCommandLineA
lstrlenA
VirtualProtect
GetConsoleCP
WaitForSingleObject
CloseHandle
GetVersion
HeapCreate
GlobalUnlock
GetSystemDefaultLangID
CompareFileTime
GetModuleHandleA
GetTickCount
GetAtomNameA
InterlockedExchange
SetConsoleCP
HeapReAlloc
WaitForMultipleObjects
OpenMutexA
user32
FindWindowA
DialogBoxParamA
CreateIcon
DispatchMessageA
CopyImage
InsertMenuA
GetKeyState
CreateMenu
SetWindowPos
SetScrollInfo
GetDlgItem
GetCursorInfo
SetPropA
MessageBoxA
DragObject
CreateCursor
EnableScrollBar
DestroyMenu
IsDialogMessage
InvertRect
DrawCaption
DispatchMessageA
GetKeyboardLayout
advapi32
RegCloseKey
RegQueryInfoKeyA
RegEnumValueA
RegCreateKeyExA
RegEnumKeyA
uxtheme
GetThemeColor
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 600KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ