Static task
static1
Behavioral task
behavioral1
Sample
311f10f2a0b76993f2bd85eadf68292e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
311f10f2a0b76993f2bd85eadf68292e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
311f10f2a0b76993f2bd85eadf68292e_JaffaCakes118
-
Size
424KB
-
MD5
311f10f2a0b76993f2bd85eadf68292e
-
SHA1
7a09a1375924285e5865317c2c06fedfb4058beb
-
SHA256
dcb6dcc456ae91df2d5cec7739e84723d206277faeb30bd2223405ddd330bdb6
-
SHA512
496e28d1a6445f54dddfd72b36fd3db17ad241d736d92b9412de4ec62c1f3c3deb8203fc47a64b06b7b56f7b0ee079803f3be1cb46b6a4d06acd438c65717337
-
SSDEEP
12288:N6h5mf3I2iwDzgn3Y5h6sriJdP9SKM9kw:4Xa3Kw/gnShk1SKMd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 311f10f2a0b76993f2bd85eadf68292e_JaffaCakes118
Files
-
311f10f2a0b76993f2bd85eadf68292e_JaffaCakes118.exe windows:4 windows x86 arch:x86
8e1e3ea602c68e65f7af7ab1b3c83a8d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLogicalDrives
GetCommandLineA
GetACP
VirtualProtect
HeapCreate
LoadLibraryExA
InterlockedExchange
Sleep
ReleaseMutex
SetEvent
SetErrorMode
GetSystemDirectoryA
GetLastError
EnterCriticalSection
GetLocaleInfoA
FindFirstFileExA
GetStdHandle
ResetEvent
RaiseException
GlobalFree
CloseHandle
user32
GetWindow
FillRect
ReleaseDC
GetParent
SetForegroundWindow
GetFocus
DrawTextA
IsIconic
FrameRect
BeginPaint
ShowWindow
GetWindowTextA
GetCursorPos
FlashWindowEx
GetActiveWindow
ValidateRect
EndPaint
GetClassNameA
wsprintfA
dsound
DirectSoundCaptureCreate
DirectSoundEnumerateA
DirectSoundCreate
DllGetClassObject
GetDeviceID
clbcatq
CoRegCleanup
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ