Static task
static1
Behavioral task
behavioral1
Sample
560de0e3a16ea9af4958d6475b0e6c4b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
560de0e3a16ea9af4958d6475b0e6c4b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
560de0e3a16ea9af4958d6475b0e6c4b_JaffaCakes118
-
Size
304KB
-
MD5
560de0e3a16ea9af4958d6475b0e6c4b
-
SHA1
ce4857d112eed43c7c041096f16c337c9e3bdf3f
-
SHA256
dd6883eee1a7d278fd4db71571ffac48015360757e7ec6ff3a74b7c6b1425fb7
-
SHA512
937fd3959d4b5c274578a902e48992d12e6695ec36f71f0a47481d8a68825717625d68368382d4a353ca1d64949c64fa0f435aeb0f9355ab765fd7e47c9b05f1
-
SSDEEP
6144:40EDbHJY4/m45M+0bJ/lWRAdcILvVxbEb8LJnVlDBTTqX2cDdkMUeyl:qVY4/RW1bJNGA6q/Ebc5/ZWXRHUeW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 560de0e3a16ea9af4958d6475b0e6c4b_JaffaCakes118
Files
-
560de0e3a16ea9af4958d6475b0e6c4b_JaffaCakes118.exe windows:4 windows x86 arch:x86
976697703c1e936de798a7d63fb89230
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProfileIntA
ExitProcess
GetStartupInfoW
GetEnvironmentVariableA
CreateFileA
SetLastError
GetTickCount
FindClose
GetFileSize
RemoveDirectoryW
CreateMutexW
WaitForSingleObject
ResetEvent
HeapCreate
GetCurrentDirectoryA
WaitForMultipleObjects
ReleaseMutex
HeapSize
Sleep
DeleteFileA
GetModuleHandleA
ResumeThread
GetCalendarInfoA
GetTickCount
CloseHandle
user32
GetDC
GetDC
GetWindowLongA
MessageBoxA
GetSysColor
PeekMessageA
DispatchMessageW
GetClassInfoA
GetDC
GetDC
GetCursorPos
CallWindowProcW
DispatchMessageW
ctl3d32
Ctl3dCtlColor
Ctl3dCtlColor
Ctl3dCtlColor
Ctl3dCtlColor
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 299KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ