Static task
static1
Behavioral task
behavioral1
Sample
1294e63f9ce816e5e85141fb99675823_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1294e63f9ce816e5e85141fb99675823_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1294e63f9ce816e5e85141fb99675823_JaffaCakes118
-
Size
219KB
-
MD5
1294e63f9ce816e5e85141fb99675823
-
SHA1
3c3922d7c37ce852ad2234c464cc7a0f8c55410a
-
SHA256
796816e37306877aa5ff6b9cc3283c098d5cdf0f8bccf1c56580bdee6ddcee77
-
SHA512
82f8601cd5a7c911ccae69a774a082ebc2eec94dee8d1c18da94d9c81e3078ef079c7edff026fbf58cb9badb8db0efcb80fa3e643d14a26201b103073a5e55dc
-
SSDEEP
3072:4bPEuwQnOFCyIPfDuj0l5X/oCGjP5SAhtJwc2L2qzw/QjqsPDyxKJPpC4lCOB:4bPHwPCykhN/nkRSAJK2qzw/QvrnXCOB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1294e63f9ce816e5e85141fb99675823_JaffaCakes118
Files
-
1294e63f9ce816e5e85141fb99675823_JaffaCakes118.exe windows:4 windows x86 arch:x86
2f4a4e168066f8a1d97594acf3e5c3b6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEvent
LocalFree
EnumCalendarInfoW
lstrlenW
GetCurrentThreadId
FindAtomW
SetLastError
GetDriveTypeW
GetNumberFormatW
ResumeThread
HeapCreate
ReadFile
GetModuleFileNameA
GetPrivateProfileStringW
GetConsoleAliasW
TlsGetValue
FindClose
EnterCriticalSection
GetCurrentProcessId
GetModuleHandleA
user32
GetSysColor
GetCursorInfo
GetKeyboardType
GetMenuInfo
GetClientRect
DispatchMessageA
SetFocus
CallWindowProcW
GetClassInfoA
DispatchMessageA
DrawTextW
IsWindow
GetKeyState
wsnmp32
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
msasn1
ASN1BERDecBool
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ