Static task
static1
Behavioral task
behavioral1
Sample
56b11eb2f2b680eb81b122e885281656_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
56b11eb2f2b680eb81b122e885281656_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
56b11eb2f2b680eb81b122e885281656_JaffaCakes118
-
Size
767KB
-
MD5
56b11eb2f2b680eb81b122e885281656
-
SHA1
8e3c05bc60d9cd9897cb5225579e2a6c0ba70be7
-
SHA256
6580aac54ed235e2244cc90266bc9eb528914efa92c489f33cf03eead3cf9002
-
SHA512
400fb1c8806ce85c59450103e3fd41d597f839b02216bbf98e4b5e6022cb08c09832b5eac6375222d47c18679275f6ba65db6b2d40d3005d0c58f1b4f4473bcf
-
SSDEEP
12288:ZGCm49Bkj8264cFiqMn0sYXFTzjLTgezELSnKClXC6iPy1c6/6w0gsfJf2rItdl:8D49WoT4cVMClILSnnCd2n/6wpI5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56b11eb2f2b680eb81b122e885281656_JaffaCakes118
Files
-
56b11eb2f2b680eb81b122e885281656_JaffaCakes118.exe windows:4 windows x86 arch:x86
af0476d68899b9335bf6d32c3ad098e1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryW
OpenEventW
ReleaseSemaphore
HeapDestroy
RemoveDirectoryW
SetLastError
GetVersion
lstrlenA
SetLastError
VirtualProtect
FatalExit
HeapSize
GetCommandLineW
LoadLibraryA
CreateFileMappingW
CreateFileA
DeleteFileA
GetFileSize
MapViewOfFile
GetStdHandle
GetStartupInfoA
CreateMutexA
RemoveDirectoryW
CreatePipe
ReleaseMutex
uxtheme
OpenThemeData
IsThemeActive
GetWindowTheme
GetThemeTextMetrics
SetWindowTheme
CloseThemeData
GetThemeBool
DrawThemeBackground
GetThemeColor
GetThemeSysSize
CloseThemeData
DrawThemeEdge
GetThemeTextExtent
icmui
SetupColorMatchingA
SetupColorMatchingW
SetupColorMatchingW
SetupColorMatchingA
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE