Static task
static1
Behavioral task
behavioral1
Sample
141bb40352d65112417c513cf25c4fc9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
141bb40352d65112417c513cf25c4fc9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
141bb40352d65112417c513cf25c4fc9_JaffaCakes118
-
Size
169KB
-
MD5
141bb40352d65112417c513cf25c4fc9
-
SHA1
f7499e8324cdede78ad25fb3d2de51cb38fbbd9a
-
SHA256
ba695dd407a6c211637c5954b456a6c2f9c29fcd8364f5c429015ad881405d9b
-
SHA512
94d1739315281cd33d887e474842a0b4a8568207b9bcfce47c5bfbec7a21fad0ac53ee9e9cfc66b6b7756b95183bb1ee4d2ab0993740374c679d9c5c72012fab
-
SSDEEP
3072:GvKhQ6zWeWREOgQnPYExUlHsC3unD2XErP17uFOR93w7WxGJDL3V2rY+fgO8Tu:d+eAtgQnPVcHqCoEFORS7T2rYCgOgu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 141bb40352d65112417c513cf25c4fc9_JaffaCakes118
Files
-
141bb40352d65112417c513cf25c4fc9_JaffaCakes118.exe windows:4 windows x86 arch:x86
0a07d5f03222bdef07456967d4e6a87f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
InvalidateRgn
RealGetWindowClassA
IsWindow
UpdateWindow
IsWindowEnabled
ExcludeUpdateRgn
ValidateRect
ReleaseCapture
EnableWindow
FlashWindow
DestroyWindow
ValidateRgn
GetCapture
SetCapture
GetUpdateRgn
kernel32
FileTimeToSystemTime
FindFirstFileW
ConvertFiberToThread
SetEnvironmentVariableW
CompareStringA
FindResourceW
FreeLibrary
LocalFree
GetOEMCP
SetCurrentDirectoryW
SetThreadIdealProcessor
LocalAlloc
IsBadReadPtr
SystemTimeToFileTime
EnumResourceNamesW
SetErrorMode
GetSystemDirectoryW
LocalFileTimeToFileTime
FindClose
RegisterWaitForSingleObject
GetShortPathNameW
FindNextFileW
GetLocalTime
LoadResource
GetCurrentProcess
LCMapStringW
FileTimeToLocalFileTime
GetStringTypeW
SearchPathW
Sections
.text Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imul Size: 1024B - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ