_3B_hMDH8c@12
Static task
static1
Behavioral task
behavioral1
Sample
56aa4e2991de64adffc630a9d4358440_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
56aa4e2991de64adffc630a9d4358440_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
56aa4e2991de64adffc630a9d4358440_JaffaCakes118
-
Size
135KB
-
MD5
56aa4e2991de64adffc630a9d4358440
-
SHA1
42069b4cf23c015994e812247f29255698251191
-
SHA256
ec97fc2aabfbe9e8088bf8a4c124a9adcda20b5436a2a6c2b7f3b68f22570e91
-
SHA512
25396656050f98efd92ad9dc60c6acb1bf1252a312d9549aac0f9f741764b29f7b6fe5b71aa6542cf39c2637d100a2fd6a58e7f19f18731192df9e4b9f9fa59f
-
SSDEEP
3072:mjE8mAqF78TLiRC/5tFp6Ii05jzKAJ6n21zQVG:mjE8mtJ8/Tyb0ddAnSzQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56aa4e2991de64adffc630a9d4358440_JaffaCakes118
Files
-
56aa4e2991de64adffc630a9d4358440_JaffaCakes118.exe windows:4 windows x86 arch:x86
cc6b3cc385fc2534177919186f173806
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_Add
ImageList_Draw
ImageList_Destroy
ImageList_GetBkColor
ImageList_Read
ImageList_DragShowNolock
ImageList_Remove
ImageList_Create
ImageList_Write
user32
GetWindowThreadProcessId
InflateRect
GetWindowRect
GetTopWindow
LoadCursorA
GetMenu
GetWindowPlacement
KillTimer
IsCharLowerA
kernel32
SizeofResource
FreeResource
GetStdHandle
ResetEvent
GetCPInfo
lstrcpynA
FormatMessageA
Sleep
SetThreadLocale
lstrcmpA
VirtualAlloc
DeleteFileA
lstrlenA
VirtualFree
GetStringTypeW
CompareStringA
LocalAlloc
LoadLibraryA
ExitProcess
GetStartupInfoA
GetFileAttributesA
lstrcmpiA
FindClose
InitializeCriticalSection
shlwapi
PathIsDirectoryA
SHQueryInfoKeyA
SHDeleteValueA
PathIsContentTypeA
Exports
Exports
Sections
CODE Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 10KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.lkdata Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jdata Size: 1024B - Virtual size: 614B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ