Static task
static1
Behavioral task
behavioral1
Sample
275583d41ac2debdd04d6dc1b3ea463d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
275583d41ac2debdd04d6dc1b3ea463d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
275583d41ac2debdd04d6dc1b3ea463d_JaffaCakes118
-
Size
53KB
-
MD5
275583d41ac2debdd04d6dc1b3ea463d
-
SHA1
abe10cf5363b21c81f5b3acf5fee866160c466e2
-
SHA256
eed9e0e5023c25cbd03b8b9382992a1736f0b32bdcc42a99aedff82d0dca8de8
-
SHA512
730a28dda5421ce23d2902ecda34c360a5a0d4c87fdc45326cdb420d110f59114648929bad8ab685dfb2322a1f122eb6d64ed920028ab6a8381dd5ee00425e3d
-
SSDEEP
1536:9VZdLlgFUCAiHv9XPPFJtnN3WnkUVVFXyF8:9FlgFUCdFFjQnkU5X7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 275583d41ac2debdd04d6dc1b3ea463d_JaffaCakes118
Files
-
275583d41ac2debdd04d6dc1b3ea463d_JaffaCakes118.exe windows:4 windows x86 arch:x86
84a113deaadf1317d0611bbd7a4cc751
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileStringA
GetProcAddress
GetTickCount
GetVersionExA
HeapAlloc
HeapFree
InterlockedDecrement
InterlockedExchange
InterlockedExchangeAdd
InterlockedIncrement
IsBadReadPtr
IsDebuggerPresent
LocalAlloc
LocalFree
GetPrivateProfileIntA
ReadFile
ReleaseMutex
RtlFillMemory
RtlMoveMemory
RtlZeroMemory
SetEvent
SetLastError
Sleep
TlsSetValue
VirtualAlloc
VirtualFree
VirtualProtect
VirtualProtectEx
WriteFile
GetModuleHandleA
GetModuleFileNameA
GetFileSize
GetCurrentDirectoryA
ExitProcess
DeviceIoControl
CreateThread
CreateFileA
CopyFileA
MulDiv
CloseHandle
wsock32
WSAStartup
WSACleanup
gethostbyname
user32
GetShellWindow
GetSysColor
GetWindowLongW
IsChild
PostMessageW
SetClassWord
SetMenuContextHelpId
SetTimer
TranslateMessage
WaitMessage
GetDC
GetCapture
DispatchMessageA
CharUpperW
CharToOemA
wsprintfA
GetMessageA
gdi32
DeleteObject
ExtTextOutA
GetLayout
GetTextColor
PatBlt
RectVisible
SelectClipRgn
SetLayout
TextOutA
DeleteDC
Sections
.text Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE