Static task
static1
Behavioral task
behavioral1
Sample
15d237e519018030d99854cd7fd2b929_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
15d237e519018030d99854cd7fd2b929_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
15d237e519018030d99854cd7fd2b929_JaffaCakes118
-
Size
8KB
-
MD5
15d237e519018030d99854cd7fd2b929
-
SHA1
977c9e9889fb1670f9bad3ee90681adf7e9de755
-
SHA256
c4555ffb39ab02e98bb11106b4e80ef16495ddd7d2afe72f5c9976f42350a0c9
-
SHA512
4d00dce4c18dcf2eebbc5d5c01fa482ce9f4012ca06d85e7f1dc14a7e2db2dff99a46e8bb90bfc8ab800edc12795dbe224ba17034b8113dfdbbf0fbe2c245445
-
SSDEEP
96:qPqSxqXIqg6h/XHz43wHo5WQL3H7vnG5Z5VDXCOnOEwzrKtzH3uyb+bWUgj8rq:qScHF6tD2vnG5Z5VDXNOzzrUzBKqkq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15d237e519018030d99854cd7fd2b929_JaffaCakes118
Files
-
15d237e519018030d99854cd7fd2b929_JaffaCakes118.exe windows:4 windows x86 arch:x86
6b8015d82682bbb88e80fe9d26dd429a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InitializeCriticalSection
WaitForSingleObject
ReleaseMutex
HeapSize
SuspendThread
CreateMutexW
ResetEvent
AddAtomA
ExitProcess
CreateFileA
GetModuleHandleA
HeapCreate
GetTickCount
GetCurrentDirectoryA
DeleteFileA
FindClose
GetTickCount
SetEndOfFile
GetFileSize
GetSystemInfo
GetStartupInfoW
GetEnvironmentVariableA
CloseHandle
HeapDestroy
SetLastError
shell32
ShellAboutA
DuplicateIcon
DragAcceptFiles
DragQueryFileA
ShellMessageBoxA
SHGetMalloc
SHGetSettings
SHGetDiskFreeSpaceA
SHFree
ExtractIconA
DragFinish
StrChrA
DllUnregisterServer
dswave
DllGetClassObject
DllGetClassObject
DllGetClassObject
DllGetClassObject
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 724KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 226KB - Virtual size: 226KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ