Static task
static1
Behavioral task
behavioral1
Sample
163f7923cd351b7f2ed8ba044338489f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
163f7923cd351b7f2ed8ba044338489f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
163f7923cd351b7f2ed8ba044338489f_JaffaCakes118
-
Size
55KB
-
MD5
163f7923cd351b7f2ed8ba044338489f
-
SHA1
cfe1c0810db39040974e3f166c5e5bef13904002
-
SHA256
baf135bebcd0aa68aa391ae59b4b9086717194a6268f6a1193f9f9bbb9dd8ba5
-
SHA512
f0aec0592f7155bdf3f5e7ae8202a10babe2da520d0e2c049ec6d9a164be569921974153c8424ea97b0e4a5ece01c862065842838fbd90a7642c3698bb4ae594
-
SSDEEP
768:oSEQfuQYm85SbD+n+6BB5MVK9cHUqMblY0Gr9NDp3JoL/ZFcaJAkttGeODCDpuIU:oRQt85SOBB5MVEuIbltIZKcFZDC9nC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 163f7923cd351b7f2ed8ba044338489f_JaffaCakes118
Files
-
163f7923cd351b7f2ed8ba044338489f_JaffaCakes118.exe windows:3 windows x86 arch:x86
734ab72b60744d520c3224aba6364438
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DisableThreadLibraryCalls
FreeLibrary
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetLastError
GetModuleHandleA
GetSystemTimeAsFileTime
HeapDestroy
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
LocalAlloc
QueryPerformanceCounter
SetLastError
user32
DispatchMessageA
EndDialog
GetCapture
GetClientRect
GetKeyboardType
GetParent
GetSystemMetrics
GetWindowRect
InvalidateRect
IsChild
IsIconic
IsWindow
PostMessageA
PostQuitMessage
ReleaseDC
SetFocus
TranslateMessage
Sections
CODE Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
BSS Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ