Static task
static1
Behavioral task
behavioral1
Sample
36db752d7ce1207cce0cdf4dc4254969_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
36db752d7ce1207cce0cdf4dc4254969_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
36db752d7ce1207cce0cdf4dc4254969_JaffaCakes118
-
Size
448KB
-
MD5
36db752d7ce1207cce0cdf4dc4254969
-
SHA1
15e90afa2b479ebbad4e389fb5fd9ed48bf85bb0
-
SHA256
f0544abbaa8aebf780a0963c2101efce1f7e9ae8a3b3901ac23b91d8a5e14435
-
SHA512
5fc68dcbe0166a157a0e6a160c12e39b2719cc2c1f56f61199c3bd8937f6e869559c5bf8390cc2af6dcd1c0642108a93082aff4545fd67df0a22449198fa4bc4
-
SSDEEP
12288:ASzkp35ebiC1gu2gc9z6B6LQnyaOWtoa7ZVoh:AIkJebX1gB9JL7Ethta
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36db752d7ce1207cce0cdf4dc4254969_JaffaCakes118
Files
-
36db752d7ce1207cce0cdf4dc4254969_JaffaCakes118.exe windows:4 windows x86 arch:x86
bc1bf0663b7ec20f1bfd89f750b4e4fe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindVolumeClose
GetTickCount
WriteConsoleA
ReleaseMutex
ExitProcess
DeleteFileA
GetModuleHandleA
OpenThread
CloseHandle
FindResourceExW
GetCommandLineW
SetEvent
SuspendThread
GetFileAttributesA
GetEnvironmentVariableW
HeapDestroy
CloseHandle
OpenEventW
HeapCreate
GetStartupInfoA
user32
GetCaretPos
IsZoomed
GetIconInfo
SetFocus
GetWindowLongA
PeekMessageA
DispatchMessageA
FindWindowA
GetSysColor
GetClassInfoA
GetKeyState
CallWindowProcW
DispatchMessageA
htui
HTUI_ColorAdjustment
HTUI_ColorAdjustment
HTUI_ColorAdjustment
HTUI_ColorAdjustment
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 608KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 442KB - Virtual size: 441KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ