Static task
static1
Behavioral task
behavioral1
Sample
30b103a14b33bed2d71b7f981e63bc78_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
30b103a14b33bed2d71b7f981e63bc78_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
30b103a14b33bed2d71b7f981e63bc78_JaffaCakes118
-
Size
241KB
-
MD5
30b103a14b33bed2d71b7f981e63bc78
-
SHA1
4c937f442e213874680b91eb03f59b3691ed8954
-
SHA256
704cf3842691bdd4b3617c14a997a9ea7231481a1164c406b0e467b1b7c6f8ce
-
SHA512
5a4dffdfa848beb5a5a356ac5f03495927e0124e017ca1760c8ce1c78c1e576c6d13eb70458e6fbaba38ca02a9c2c8edaf6174a7267ef64e2281cf60d44fefae
-
SSDEEP
6144:us2X8cOQHmxVDprCwBrfazfsRj8LZsxbzSNmbofyL11s:92X8jQGxjLwkRj8FsxbzSNqo6LY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30b103a14b33bed2d71b7f981e63bc78_JaffaCakes118
Files
-
30b103a14b33bed2d71b7f981e63bc78_JaffaCakes118.exe windows:4 windows x86 arch:x86
d2be8f14919eb869b4217581466cecb9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLogicalDrives
GetSystemDefaultLCID
TlsAlloc
GetCurrentProcess
TlsSetValue
lstrcmpA
GetCurrentThread
GetModuleHandleW
GetACP
GetCommandLineA
FreeLibrary
GetCurrentThreadId
VirtualAlloc
lstrcatA
TlsFree
GetCurrentProcessId
GetUserDefaultLangID
IsDBCSLeadByte
GetModuleFileNameA
GetDriveTypeW
TlsGetValue
user32
UpdateWindow
IsWindowVisible
RegisterClassA
CreateWindowExA
BeginPaint
GetWindowLongA
ReleaseDC
GetWindowTextA
GetActiveWindow
ShowWindow
GetClassLongA
IsIconic
GetDC
GetForegroundWindow
GetWindowDC
GetSystemMetrics
GetWindow
GetFocus
GetWindowTextLengthA
shell32
StrCmpNA
StrRChrA
StrChrA
StrRChrIA
StrChrIA
StrCmpNIA
msctf
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
TF_GetThreadFlags
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ