Static task
static1
Behavioral task
behavioral1
Sample
287bd4fdf7fdb5f8f4bc73090386eb97_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
287bd4fdf7fdb5f8f4bc73090386eb97_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
287bd4fdf7fdb5f8f4bc73090386eb97_JaffaCakes118
-
Size
638KB
-
MD5
287bd4fdf7fdb5f8f4bc73090386eb97
-
SHA1
85842b926c9f930b64cef0db61079300d41ef9bb
-
SHA256
2ba4c374666cd8b85a468e0dacf1005fe4256762c8a660fef3c832525db968c4
-
SHA512
86c3753eac317e0badcfb3a98c866243283402453ede2e3becd581f1fd9dc7560a4b469cc7f2d4a091cac2e93364e458b485621311416abf657d2340c754c980
-
SSDEEP
12288:haYECXILnhqp5DSOBNHNEdV2J9XQ6fq70Q6d/crSQUdW1zlXRPccpR7iDlNANx:haYKj0DbNySi6S70Q6CrSTAZ1Hirax
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 287bd4fdf7fdb5f8f4bc73090386eb97_JaffaCakes118
Files
-
287bd4fdf7fdb5f8f4bc73090386eb97_JaffaCakes118.exe windows:4 windows x86 arch:x86
b044d93bec17152b7bf0eab2f8c24698
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
GetConsoleCP
GetStdHandle
lstrlenA
CloseHandle
HeapCreate
WaitForMultipleObjects
CompareFileTime
HeapReAlloc
GetTickCount
GetSystemDefaultLangID
GetProfileIntA
AddAtomA
InterlockedExchange
VirtualProtect
GetModuleHandleA
GetVersion
GlobalUnlock
TlsFree
TlsGetValue
LoadLibraryA
user32
TranslateMessage
InsertMenuA
PostMessageA
SetPropA
ModifyMenuA
EqualRect
FindWindowA
EnableScrollBar
SubtractRect
GetKeyboardLayout
CopyRect
GetDlgItem
PaintDesktop
GetMenuStringA
MessageBoxA
CreateCursor
GetWindowTextA
DestroyMenu
CreateCaret
ShowWindow
DialogBoxParamA
UpdateWindow
GetKeyState
DispatchMessageA
SetWindowPos
msi
MsiCloseHandle
MsiGetMode
MsiEnumClientsA
MsiEnumProductsA
MsiDoActionA
ws2_32
WSAAccept
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 600KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ