Static task
static1
Behavioral task
behavioral1
Sample
4372ea9a20707e5d5d380f2a81af5d8c_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
4372ea9a20707e5d5d380f2a81af5d8c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4372ea9a20707e5d5d380f2a81af5d8c_JaffaCakes118
-
Size
89KB
-
MD5
4372ea9a20707e5d5d380f2a81af5d8c
-
SHA1
82fd57dc1e72ab13212be7a9aa886c7c750f4ba6
-
SHA256
9ece31622ab46cf5c954dba24dc2ef95d959f7e1b29db14eb51cc90345cbcf3d
-
SHA512
efb76c71ee26e2679686daa29e697c9af6630846dbbb73f5ad5b96c8dc96582c3ceec237728795bad9069b770fa703d5a434a74b398698feac97439968ffc111
-
SSDEEP
1536:D7XTaqQEN1xxfBtu2evNUU66j4BigxwxHctBP5tJxb7hCcpJHX1x6LA7A:D7XTaq1N1xxZtu2evjj4s8ycthBxbFiz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4372ea9a20707e5d5d380f2a81af5d8c_JaffaCakes118
Files
-
4372ea9a20707e5d5d380f2a81af5d8c_JaffaCakes118.exe windows:4 windows x86 arch:x86
cdfd6f0f5b2f37c458b3c331667eef44
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetModuleHandleA
SuspendThread
LoadLibraryExA
GetTickCount
HeapReAlloc
WaitForMultipleObjects
GlobalUnlock
WaitForSingleObject
lstrlenA
GetCommandLineA
InterlockedExchange
GetAtomNameA
GetVersion
HeapCreate
CompareFileTime
VirtualProtect
GetSystemDefaultLangID
SetConsoleCP
GetStdHandle
GetConsoleCP
user32
IsDialogMessage
InvertRect
DrawCaption
DialogBoxParamA
FillRect
DestroyMenu
SetScrollInfo
DispatchMessageA
CreateIcon
InsertMenuA
DragObject
CreateMenu
GetCursorInfo
CopyImage
GetDlgItem
GetKeyState
GetKeyboardLayout
SetPropA
FindWindowA
SetWindowPos
EnableScrollBar
advapi32
RegCloseKey
RegCreateKeyExA
RegEnumKeyA
RegQueryInfoKeyA
RegEnumValueA
apphelp
ApphelpCheckExe
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 808KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ