Static task
static1
Behavioral task
behavioral1
Sample
434a64f0f01a0dbb7d31097baa2b804b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
434a64f0f01a0dbb7d31097baa2b804b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
434a64f0f01a0dbb7d31097baa2b804b_JaffaCakes118
-
Size
808KB
-
MD5
434a64f0f01a0dbb7d31097baa2b804b
-
SHA1
a277eecd8173dab34cca5c7df899c45a9e6a69bb
-
SHA256
db37ac5189ca640c316cc78fbaeb73752ae4f3348a986e149c3f820ecb79ceee
-
SHA512
20f6490a9bdab2f97b877da8779758964c4ea6a6667f3ba3c54575f9afc28a507c35bc263c93a3dea56a47ded0425ef042ca39cdca2b1a762fed51581c8a93b0
-
SSDEEP
12288:MvLLMO88Ei8Rf7DG6Lyge1IruyaNFt6r2hTh3zYtul1xXb584PQTkZzsJRpAmmv:gH89t7DG6fezNbnh13zYtil9Kcs+v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 434a64f0f01a0dbb7d31097baa2b804b_JaffaCakes118
Files
-
434a64f0f01a0dbb7d31097baa2b804b_JaffaCakes118.exe windows:4 windows x86 arch:x86
05133f50ba061056c82320c5a0afde63
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
GetDriveTypeW
lstrlenA
GetMailslotInfo
GetProcessHeap
GetExitCodeProcess
GlobalFree
CreateThread
VirtualAlloc
FindVolumeClose
ReleaseMutex
FreeConsole
ReadFile
LocalFree
LocalSize
CloseHandle
GetModuleHandleW
ResetEvent
GetLocalTime
GetPrivateProfileIntW
user32
GetClientRect
DispatchMessageA
SetFocus
CallWindowProcA
GetKeyState
GetSysColor
GetDlgItem
CreateWindowExA
DrawStateW
GetClassInfoA
EndDialog
GetMenu
GetCursorInfo
clbcatq
DllGetClassObject
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
desk.cpl
InstallScreenSaverA
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 799KB - Virtual size: 798KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ