Static task
static1
Behavioral task
behavioral1
Sample
429e7494b34b8a6207cb6adafbc8a2dc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
429e7494b34b8a6207cb6adafbc8a2dc_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
429e7494b34b8a6207cb6adafbc8a2dc_JaffaCakes118
-
Size
129KB
-
MD5
429e7494b34b8a6207cb6adafbc8a2dc
-
SHA1
9e4cb66bece47a1000cbaa9773de948ce1b16b2e
-
SHA256
93ceee176817f9f4802dc929b24a2643da99d437d56bd4a634f325c4ae5e4c94
-
SHA512
117ad1d8af7f01b24459983c20e80eaaa00cbef195d886da86cf5c23d8ad2bb83ae92761d85a7ae891dd657978d6906431f8da1a927b240993b3a834cbb84485
-
SSDEEP
1536:jDgL04iAnc6uaPhsapbfL3JK8N1yvSGPPKYrgfg0ySrrLDmWH3R:jDOpiAcx4sKJK8N1yb6Yrz0ySXLDpB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 429e7494b34b8a6207cb6adafbc8a2dc_JaffaCakes118
Files
-
429e7494b34b8a6207cb6adafbc8a2dc_JaffaCakes118.exe windows:2 windows x86 arch:x86
4f69f8cced15f1a4adfc1f9393bb47f2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RemoveDirectoryA
GetAtomNameA
lstrcmpiW
FlushFileBuffers
lstrcpyn
OpenEventW
CreatePipe
GetCurrentDirectoryA
GetModuleHandleA
GetModuleFileNameW
GetCPInfo
GetCurrentThreadId
CreateMutexA
ConnectNamedPipe
OpenSemaphoreA
SystemTimeToFileTime
GetFileTime
AddAtomA
lstrcpyA
MultiByteToWideChar
OpenMutexW
MoveFileA
GetShortPathNameA
CreateDirectoryW
GetDiskFreeSpaceA
user32
DefWindowProcW
GetWindowLongW
SetDlgItemTextW
IsChild
GetSysColorBrush
ShowWindow
SetWindowRgn
GetMenuStringW
CharLowerW
CreateDialogIndirectParamW
RegisterWindowMessageA
GetCapture
WinHelpW
DialogBoxIndirectParamW
FindWindowA
CheckMenuItem
GetTopWindow
wsprintfW
GetMenuState
GetWindowTextA
CreateDialogParamA
InvalidateRect
InsertMenuA
IsIconic
GetDlgItemTextW
gdi32
StretchBlt
CreateDIBitmap
CreatePen
GetObjectW
CreateDCW
advapi32
RegQueryInfoKeyW
RegQueryInfoKeyA
RegDeleteValueW
comdlg32
LoadAlterBitmap
PageSetupDlgA
GetOpenFileNameA
GetFileTitleW
PrintDlgA
PrintDlgExW
shell32
ExtractIconW
StrRStrIW
ole32
CoFileTimeNow
CoGetMalloc
version
VerLanguageNameW
VerInstallFileW
VerQueryValueA
GetFileVersionInfoW
ws2_32
send
getpeername
getservbyport
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ