Static task
static1
Behavioral task
behavioral1
Sample
1194c8e6190512092ab12056fccc7266_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1194c8e6190512092ab12056fccc7266_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1194c8e6190512092ab12056fccc7266_JaffaCakes118
-
Size
177KB
-
MD5
1194c8e6190512092ab12056fccc7266
-
SHA1
b77e200644a3335b16290a76d2725fd5032b8208
-
SHA256
68986fb6fe1c9d1d0939474b772b61d9686f2e57f34fae512a80674f8ddd9d60
-
SHA512
6cb72ea5ab1aa21a3f1c8fde8f176e3910b396c04cfc34903f090b7cf5f5b77b834ad094ca558eb0f6705dbcd5f9ffff59b41aa5146f0d72b70db1b761b24779
-
SSDEEP
3072:HnJSzO4fdlAPzxwTwGrCGpAGdOknvyrhe2NuCK9oNN8nTvP/kw3CzvVYTvJ0b:HuRnEqwUNAGdOkq9eCOokT/LybKTvJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1194c8e6190512092ab12056fccc7266_JaffaCakes118
Files
-
1194c8e6190512092ab12056fccc7266_JaffaCakes118.exe windows:4 windows x86 arch:x86
0dd0aecb12982446a186fb1e7694ca6f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
ValidateRect
RealGetWindowClassA
ExcludeUpdateRgn
IsWindowEnabled
GetCapture
EnableWindow
UpdateWindow
ValidateRgn
DestroyWindow
IsWindow
FlashWindow
ReleaseCapture
InvalidateRgn
SetCapture
GetUpdateRgn
mprapi
MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName
kernel32
LocalFileTimeToFileTime
LocalFree
CompareStringA
IsBadReadPtr
CreateFiberEx
GetOEMCP
FreeLibrary
GetShortPathNameW
SetEnvironmentVariableW
SetThreadAffinityMask
SetErrorMode
LoadResource
EnumResourceNamesW
FileTimeToSystemTime
SystemTimeToFileTime
GetStringTypeW
GetLocalTime
FindNextFileW
SetThreadPriority
SetCurrentDirectoryW
GetCurrentProcess
LocalAlloc
FindResourceW
FileTimeToLocalFileTime
LCMapStringW
FindFirstFileW
GetSystemDirectoryW
FindClose
SearchPathW
Sections
.text Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imul Size: 512B - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ