Static task
static1
Behavioral task
behavioral1
Sample
124e750dacb6a5dde24d32b29e644f26_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
124e750dacb6a5dde24d32b29e644f26_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
124e750dacb6a5dde24d32b29e644f26_JaffaCakes118
-
Size
316KB
-
MD5
124e750dacb6a5dde24d32b29e644f26
-
SHA1
1a230cf65388972be7d6739f89ce7cf610e89042
-
SHA256
6c1517383077b6fa9a4511e74f57db06353627f30c09b9a358e85b5ea0ca9f39
-
SHA512
adfc2a01a194f3fd9169b5680af0058c4fca3f41a6842e2037c38b8407cb0077fa5be93c0161c3fc4bc1d8759ea90a82b2201a313bf60daf1e1371d7414daf17
-
SSDEEP
6144:zhgMbyt+/lFO7UXdj5hcD28Ek5k+6GGv+H1wpZnjZr0J/x:zhgxtAA70R5uq89H6EHe3pUx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 124e750dacb6a5dde24d32b29e644f26_JaffaCakes118
Files
-
124e750dacb6a5dde24d32b29e644f26_JaffaCakes118.exe windows:4 windows x86 arch:x86
908e66e411149b95755918f418541330
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
HeapCreate
GetSystemDirectoryA
OpenSemaphoreA
FindAtomA
GetCurrentProcessId
FormatMessageA
WriteConsoleA
GetEnvironmentStringsA
GetExpandedNameA
InterlockedExchange
GetACP
IsDebuggerPresent
GetCompressedFileSizeA
GetThreadPriority
GlobalFree
GetCurrentProcess
GetCurrentThread
GetStdHandle
GetModuleHandleA
FlushFileBuffers
user32
IsIconic
GetCursorPos
GetWindowTextLengthA
ReleaseDC
FrameRect
GetFocus
GetClassNameA
FillRect
GetDlgItem
wsprintfA
DrawTextA
GetParent
ValidateRgn
GetWindow
ShowWindow
BeginPaint
SetForegroundWindow
SetActiveWindow
EndPaint
linkinfo
IsValidLinkInfo
GetCanonicalPathInfoA
GetLinkInfoData
ResolveLinkInfoA
DestroyLinkInfo
rtutils
LogEventW
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ