Static task
static1
Behavioral task
behavioral1
Sample
29293165fe68f029f4f7cd12789c0704_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
29293165fe68f029f4f7cd12789c0704_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
29293165fe68f029f4f7cd12789c0704_JaffaCakes118
-
Size
51KB
-
MD5
29293165fe68f029f4f7cd12789c0704
-
SHA1
aac2d4b5b35bae3806eec03bf843023c6f5f2067
-
SHA256
a1c650b339fb5be04ef3f4bb5dded807392907be1c8f8c3da9b6628589b49b79
-
SHA512
cc1d85010a377c224d9eb116b1bfee5f6a8ca36cd7bf4aeb807ca7d6688da13cdf02b5655cd3feda9ce985f8af8470f737ff3eb838550b7076c12d8826a5f8a1
-
SSDEEP
1536:bvfTiasa6wgD9qlNSSy7K7ZhlvUx4TJ2ZBnC:bfsabgD9eNSSyCZhtTTJU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29293165fe68f029f4f7cd12789c0704_JaffaCakes118
Files
-
29293165fe68f029f4f7cd12789c0704_JaffaCakes118.exe windows:3 windows x86 arch:x86
aaa992d4b4dce5258eb9d2f6be581b74
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventA
CreateThread
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
GetCommandLineA
GetCurrentProcessId
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
HeapDestroy
InterlockedExchange
MultiByteToWideChar
QueryPerformanceCounter
UnhandledExceptionFilter
VirtualAlloc
user32
BeginPaint
CharNextA
DefWindowProcA
DialogBoxParamA
EndDialog
GetCapture
GetDesktopWindow
GetFocus
GetKeyboardType
InvalidateRect
IsChild
IsIconic
IsWindow
KillTimer
LoadStringA
SendMessageA
SetFocus
SetForegroundWindow
SetWindowTextA
ShowWindow
Sections
CODE Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
BSS Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ