Static task
static1
Behavioral task
behavioral1
Sample
434369fc0428cceb84ee1ae49d1b323f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
434369fc0428cceb84ee1ae49d1b323f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
434369fc0428cceb84ee1ae49d1b323f_JaffaCakes118
-
Size
637KB
-
MD5
434369fc0428cceb84ee1ae49d1b323f
-
SHA1
74f0b81d26082014ab20ad0fb76ab697a4d6018c
-
SHA256
59be93e99051b11574d3221f17d185e76ab559cf674eda3c51907789fd4820b5
-
SHA512
0f8e74cbfe89ef4a79bc32f92fae7bd4132bfef8a0f12ba95399f39ad6c55a5f880b652f152ab27fc3f92c4b3346eee99491bc6081f3914081f3a2c34b5a04ed
-
SSDEEP
12288:UzKTBwOoP9oO6ZQTjwbkJPyXpJmuIwFPzk605Aky+oklRfg1JOpA0zvZ3:AoGPyRQXkkJaXrmu05Ak6MRoXyhB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 434369fc0428cceb84ee1ae49d1b323f_JaffaCakes118
Files
-
434369fc0428cceb84ee1ae49d1b323f_JaffaCakes118.exe windows:4 windows x86 arch:x86
f5c89017ad646851e5dcc5989b914f1e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
FindAtomA
GetAtomNameA
lstrlenA
CompareFileTime
CloseHandle
GetConsoleCP
VirtualProtect
TlsFree
GlobalUnlock
GetStdHandle
WaitForSingleObject
GetVersion
GetProfileIntA
TlsGetValue
InterlockedExchange
GetTickCount
GetACP
HeapReAlloc
HeapWalk
GetModuleHandleA
user32
InflateRect
EqualRect
PaintDesktop
EnableScrollBar
UpdateWindow
DispatchMessageA
InsertMenuA
SetWindowPos
LoadIconA
GetMenu
CopyRect
TranslateMessage
GetWindowTextA
ModifyMenuA
CreateCaret
GetDlgItem
GetMenuStringA
SetPropA
GetKeyboardLayout
MessageBoxA
SubtractRect
PostMessageA
GetScrollRange
GetSubMenu
DialogBoxParamA
ShowWindow
PostQuitMessage
DestroyMenu
msi
MsiGetMode
MsiDoActionA
MsiEnumProductsA
MsiEnumClientsA
MsiCloseHandle
uxtheme
GetThemeBool
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ