Static task
static1
Behavioral task
behavioral1
Sample
12558e9b25a3a41ec13be28d7c729fcf_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
12558e9b25a3a41ec13be28d7c729fcf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
12558e9b25a3a41ec13be28d7c729fcf_JaffaCakes118
-
Size
1.2MB
-
MD5
12558e9b25a3a41ec13be28d7c729fcf
-
SHA1
de4e03828e7bb8f1bbb947e75d7df44b2c37a1af
-
SHA256
dd8cc2ae9dfc135b900a7efafee118945eac8fa77930526364a9bb0a878b6b12
-
SHA512
491f29df3cef383596610ebede5d0c4ca117a7c1d283a22aa91e2e855e0f8546545237a76775cdfb27ea59b41fabafaee9022eef7415469959596bb8cfb284df
-
SSDEEP
24576:LA8un+X3wzL8TBsV6Ng4+/T2aJlL0xtWrLqmEeH7MMMMMMMMMMMMMMMMMMJdjnJY:LqIVuRTTJ6fFmBMMMMMMMMMMMMMMMMM9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12558e9b25a3a41ec13be28d7c729fcf_JaffaCakes118
Files
-
12558e9b25a3a41ec13be28d7c729fcf_JaffaCakes118.exe windows:4 windows x86 arch:x86
9b0221e9e5dd27417576d6248816d756
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenJobObjectA
LZClose
GetLogicalDriveStringsA
GetTempPathA
GetTickCount
GlobalFix
GetVolumePathNamesForVolumeNameA
CreateNamedPipeA
GetConsoleTitleA
CreateProcessA
OpenSemaphoreA
EndUpdateResourceA
GetTempFileNameA
DeviceIoControl
GetExitCodeProcess
ChangeTimerQueueTimer
GetPriorityClass
VirtualAllocEx
GetVolumePathNameA
GetConsoleOutputCP
GetNumberOfConsoleMouseButtons
RtlMoveMemory
EnumResourceNamesA
GetConsoleInputExeNameA
GetComputerNameA
OpenFileMappingA
HeapDestroy
SetVDMCurrentDirectories
CreateTimerQueue
IsDebuggerPresent
LocalAlloc
WaitForMultipleObjects
GetLastError
FormatMessageA
SetEvent
SetProcessPriorityBoost
GetProcessHeap
CopyFileExW
GetCurrentDirectoryA
dpmodemx
SPInit
advapi32
CredFree
user32
SystemParametersInfoA
UpdateLayeredWindow
FindWindowExW
GetClassNameA
MessageBeep
ToUnicode
DestroyWindow
GetWindow
SetWindowsHookExW
LoadLocalFonts
CharLowerA
GetInputDesktop
GetKeyState
MapVirtualKeyExA
GetMenuItemInfoA
CharToOemBuffA
DrawFrame
SetWindowStationUser
InflateRect
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 645KB - Virtual size: 1001KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 321KB - Virtual size: 321KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ