Static task
static1
Behavioral task
behavioral1
Sample
1827a22499fd8f63dda7b85bc5717f89_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
1827a22499fd8f63dda7b85bc5717f89_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1827a22499fd8f63dda7b85bc5717f89_JaffaCakes118
-
Size
27KB
-
MD5
1827a22499fd8f63dda7b85bc5717f89
-
SHA1
90032b248d07e913e77cc30c875aeb0b637ba41b
-
SHA256
78dbd1097d472d8230dde489d41b8a151b8f5f6b514a02234fdf22c0d026bc4c
-
SHA512
c751af2e1f7f93cf45bc86dff04c9fd932dc487604d236349ec215146ed6fdecc4ac88915cb73224d2c6b03588fafd2c6d2afbd5e44ac8929d551e75ed0245ef
-
SSDEEP
768:UawWBvsOkp3VjP8e/ycEqwMZqF+rl6e6hemMbv:Rslp3tUe/ycPweq8lTcMz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1827a22499fd8f63dda7b85bc5717f89_JaffaCakes118
Files
-
1827a22499fd8f63dda7b85bc5717f89_JaffaCakes118.exe windows:5 windows x86 arch:x86
856f58b1b3409ec384cc4dbde85d9e8c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
GetLastError
LoadLibraryW
CreateEventW
GetModuleHandleA
DeleteCriticalSection
GetCurrentProcess
GetModuleHandleA
DeleteCriticalSection
InitializeCriticalSection
CloseHandle
GetProcessHeap
InterlockedCompareExchange
GetSystemTimeAsFileTime
GetModuleHandleA
HeapDestroy
InterlockedIncrement
InterlockedExchange
GetCurrentProcess
InterlockedDecrement
MultiByteToWideChar
HeapAlloc
GetProcessHeap
GetSystemTimeAsFileTime
GetModuleFileNameW
GetProcessHeap
LocalFree
GetSystemTimeAsFileTime
LocalFree
VirtualAlloc
VirtualAlloc
InterlockedExchange
lstrlenA
HeapDestroy
VirtualAlloc
GetCurrentProcess
GetProcessHeap
LocalAlloc
ReadFile
GetLastError
CreateThread
InterlockedExchange
SetLastError
GetProcAddress
CloseHandle
QueryPerformanceCounter
LeaveCriticalSection
InterlockedExchange
LocalAlloc
LoadLibraryA
user32
KillTimer
LoadCursorW
GetDlgItem
GetClientRect
GetDesktopWindow
EndPaint
KillTimer
GetParent
EnableWindow
SendMessageW
SetWindowPos
DialogBoxParamW
BeginPaint
LoadCursorW
SetWindowPos
SetWindowPos
EnableWindow
EndDialog
GetFocus
SetTimer
PostMessageW
BeginPaint
ReleaseDC
wsprintfA
GetDC
EnableWindow
DialogBoxParamW
GetDesktopWindow
TranslateMessage
ReleaseDC
GetDlgItem
CharNextW
SetWindowLongW
SetTimer
SetWindowPos
EndPaint
EndPaint
CharNextW
PeekMessageW
BeginPaint
SetWindowLongW
EnableWindow
GetWindowLongW
IsWindow
DispatchMessageW
GetParent
PostQuitMessage
DialogBoxParamW
PostMessageW
SetCursor
Sections
.text Size: 21KB - Virtual size: 28KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ