Static task
static1
Behavioral task
behavioral1
Sample
465c0356263cd0709b83a0687b75eb0f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
465c0356263cd0709b83a0687b75eb0f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
465c0356263cd0709b83a0687b75eb0f_JaffaCakes118
-
Size
145KB
-
MD5
465c0356263cd0709b83a0687b75eb0f
-
SHA1
8e2e02c1c349bf9d0dfba960126f1224cf9282ad
-
SHA256
e432554493e4b51219e506cf04c8fa4daf6fab993251b7d864ef748327dc02a5
-
SHA512
b24f2b8cb7f486298fce525014ea95a134c819d3caad2ffae23a18412da6416fe15bc9bdd664b8693829a207f1159d959d0877e0d5f05eee62fe0de896ef8b89
-
SSDEEP
3072:gjUdkjfo4BZJq51N5D2DOIYkJIXSab371cA+xPWrYoC2xq67:qk41q5ZQtSXbeNW5CAV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 465c0356263cd0709b83a0687b75eb0f_JaffaCakes118
Files
-
465c0356263cd0709b83a0687b75eb0f_JaffaCakes118.exe windows:7 windows x86 arch:x86
88bfe02d934474b42718047290f653c7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
LocalFree
GetTickCount
VirtualFree
VirtualFree
LocalAlloc
LocalFree
GetModuleHandleA
VirtualFree
WaitForSingleObject
GetModuleFileNameA
SetEvent
GetProcessHeap
GetCommandLineA
LocalAlloc
GetCurrentThreadId
WaitForSingleObject
LocalFree
SetUnhandledExceptionFilter
GetCommandLineA
LocalAlloc
SetUnhandledExceptionFilter
ntdll
NtAllocateVirtualMemory
user32
SetTimer
ShowWindow
GetWindowRect
CreateWindowExW
PostMessageW
DestroyWindow
SendMessageW
PostMessageW
GetSystemMetrics
DefWindowProcW
GetMessageW
ReleaseDC
GetMessageW
DestroyWindow
SendMessageW
DestroyWindow
GetDC
SendMessageW
GetDlgItem
GetSystemMetrics
GetSystemMetrics
GetDC
Sections
.text Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 129KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ