Static task
static1
Behavioral task
behavioral1
Sample
14a334fa328b1c3913ab363933827a40_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
14a334fa328b1c3913ab363933827a40_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
14a334fa328b1c3913ab363933827a40_JaffaCakes118
-
Size
299KB
-
MD5
14a334fa328b1c3913ab363933827a40
-
SHA1
56320aae9311435118ac57a90112662c2f26dbee
-
SHA256
af2043e92f330ce961fb4f05289c9c024b3d7fd7dc19605546d620f93df6f445
-
SHA512
c9ba8526ba0c4bfea3ab10e9297dd1285f3c80efaefb1c3447b747964ad4d8f90decc61b141aaaff0f0948f954174ed3d34269259aeb35b8145460c6eff7d09b
-
SSDEEP
6144:Aj97XQqIdPZfnguEjpM1f307RsUIEHDaN553/TaIjGD7c8F/ktcTgU:Aj1XE7fguEFM1f3URs14QDGpD7c8F/kJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14a334fa328b1c3913ab363933827a40_JaffaCakes118
Files
-
14a334fa328b1c3913ab363933827a40_JaffaCakes118.exe windows:4 windows x86 arch:x86
7f8f514b7db8f7e9365a3838fe3398a4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
WriteConsoleW
HeapCreate
ReleaseMutex
WriteConsoleW
CopyFileW
GetModuleHandleA
GetStartupInfoA
IsBadCodePtr
lstrlenW
DisconnectNamedPipe
IsValidLocale
GetFileAttributesA
GetLastError
IsBadStringPtrA
WriteConsoleW
GetFileSize
CreatePipe
SetPriorityClass
CloseHandle
GetCurrentDirectoryA
lstrcpyW
msftedit
RichEditWndProc
RichComboBoxWndProc
RichListBoxWndProc
SetCustomTextOutHandlerEx
shell32
SHGetSettings
ShellMessageBoxA
SHGetMalloc
DuplicateIcon
SHGetMalloc
SHGetDiskFreeSpaceA
DragAcceptFiles
ExtractIconA
SHGetDiskFreeSpaceA
ShellMessageBoxA
StrChrA
ShellAboutA
DragQueryFileA
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 289KB - Virtual size: 289KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ