Static task
static1
Behavioral task
behavioral1
Sample
104875dbd0b9cff97ded17e9d918b6f5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
104875dbd0b9cff97ded17e9d918b6f5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
104875dbd0b9cff97ded17e9d918b6f5_JaffaCakes118
-
Size
63KB
-
MD5
104875dbd0b9cff97ded17e9d918b6f5
-
SHA1
46e49f0f2a947326f55ff14d1d27af9f9805d7f8
-
SHA256
b7976392cc4fbab1cba46e141174a3d29e00ff51fb789f617b45e1a8f8e1b407
-
SHA512
bd926857ea30cd6089a687ba1d5056337267f1583183e0c805d286913dde5cb38b23b75a041692f4fa881eb6177c4b7753c1d2ecbff06c9e80d68d92d999e339
-
SSDEEP
768:WZIhuFg73+G8Fy4VjnDitRIkZJqj6+J3nQ8iyKhiBphFEWw10nVS3:gIhCg7ODF7Zj5xlkiTEIVs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 104875dbd0b9cff97ded17e9d918b6f5_JaffaCakes118
Files
-
104875dbd0b9cff97ded17e9d918b6f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
19ef4b0522b29b44736e76f9d5288601
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
LoadLibraryExW
GetModuleHandleA
TerminateThread
SetEnvironmentVariableA
FindResourceA
CreateMutexA
CreateFileA
HeapCreate
lstrlenW
SetLastError
ReleaseMutex
PulseEvent
GetConsoleMode
CloseHandle
GlobalUnlock
GetStdHandle
Sleep
GetCurrentThreadId
TlsGetValue
user32
DispatchMessageA
IsWindow
DrawMenuBar
GetDC
CopyRect
GetClipCursor
DrawEdge
GetDlgItem
CallWindowProcA
CheckRadioButton
GetIconInfo
FillRect
SetFocus
apphelp
SdbFindFirstTag
ApphelpCheckIME
SdbGetDatabaseID
SdbCloseDatabase
SdbFindNextTag
clbcatq
ComPlusMigrate
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE