Static task
static1
Behavioral task
behavioral1
Sample
282b0de0a929c28a86180087456eb3d9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
282b0de0a929c28a86180087456eb3d9_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
282b0de0a929c28a86180087456eb3d9_JaffaCakes118
-
Size
153KB
-
MD5
282b0de0a929c28a86180087456eb3d9
-
SHA1
2bdde3943a26fbe6c360243c01e947b5e3248992
-
SHA256
d8ae3372e118cda484c692a1bfe71cf5b8117c552e7ffdc6f6287dc196586c7a
-
SHA512
24a3f696c3bcea9369fad81147b3d84fd107fe9e1808367bcc77f050c5ddb033f3ab7bfeaee54873918ca2c073445dca8e3402b06c1aa348424fc2c0b3cbd943
-
SSDEEP
3072:j7rsT6EFY6HjYrxiXR7RVNhnxEJJ8scWDjri+rx:j7gVnfxBscWPm+r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 282b0de0a929c28a86180087456eb3d9_JaffaCakes118
Files
-
282b0de0a929c28a86180087456eb3d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
f25ac227ea38b2c519a380baecd4fe11
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
VirtualAlloc
AddAtomA
GetThreadLocale
GetUserDefaultLCID
GetFileAttributesW
GetOEMCP
TlsSetValue
TlsFree
GetDriveTypeA
GetSystemDefaultLCID
GetCommandLineA
IsDBCSLeadByte
FindFirstVolumeA
GetModuleHandleW
TlsGetValue
DeleteFileA
GetModuleFileNameA
lstrcatA
GetCurrentThreadId
SwitchToThread
user32
GetWindowTextLengthA
GetActiveWindow
GetWindowLongA
GetWindowDC
GetWindowTextA
GetClassInfoExA
CloseWindow
GetDC
ValidateRect
ReleaseDC
IsWindowVisible
GetWindow
ShowWindow
GetFocus
IsIconic
RegisterClassA
GetSystemMetrics
GetForegroundWindow
InvalidateRect
psapi
GetMappedFileNameA
GetWsChanges
GetModuleBaseNameA
EmptyWorkingSet
GetModuleInformation
EnumPageFilesA
uxtheme
GetThemeInt
GetThemeColor
GetThemeFont
GetThemeBool
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ