Static task
static1
Behavioral task
behavioral1
Sample
ec7af584172988444409571c2034700d_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ec7af584172988444409571c2034700d_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
ec7af584172988444409571c2034700d_JaffaCakes118
-
Size
211KB
-
MD5
ec7af584172988444409571c2034700d
-
SHA1
3e57a804a2706435c2b4bf40edfa5ac1a189a46a
-
SHA256
d24f3de1abdcaa823e33004bc584f2c380eaf3b1530ff687e1033c64c317fb4a
-
SHA512
d329a87b1f054214bedd0af4df6149ee79351573e93072736a62b365445f0ac774d51e7ec405800788b0fa69777299c28177dab5dc6ab3e3fee9c0e0cd9c0a6a
-
SSDEEP
6144:cjAc++3YFxvJF7WnnV5oG3NQhbMQPpz2OB:8s+YFxvJF72zoG3ahbj9B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec7af584172988444409571c2034700d_JaffaCakes118
Files
-
ec7af584172988444409571c2034700d_JaffaCakes118.exe .ps1 windows:5 windows x86 arch:x86 polyglot
95ae698d641e87a99124e1bf02b09a3e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
CreateFileA
GetModuleHandleA
LoadLibraryA
GetWindowsDirectoryA
GetProcAddress
user32
GetMenu
GetMessageW
GetSubMenu
GetSysColor
GetSystemMenu
GetSystemMetrics
GetWindowLongW
GetWindowPlacement
InvalidateRect
IsCharAlphaW
IsClipboardFormatAvailable
IsDialogMessageW
IsDlgButtonChecked
IsZoomed
LoadAcceleratorsW
LoadCursorW
LoadIconW
LoadStringW
MessageBoxW
GetKeyState
PeekMessageW
PostMessageW
PostQuitMessage
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
ScreenToClient
SendDlgItemMessageW
SendMessageW
SetCapture
SetCursor
SetCursorPos
SetDlgItemTextW
SetFocus
SetWindowLongW
SetWindowTextW
SetWindowsHookExW
ShowCursor
ShowWindow
TranslateAcceleratorW
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UpdateWindow
wsprintfW
GetDlgItemTextW
GetDlgItemInt
GetDlgItem
GetDC
GetClipboardData
GetClientRect
FrameRect
FillRect
EnumChildWindows
EndPaint
EndDialog
EnableWindow
EnableMenuItem
DrawMenuBar
DrawFocusRect
DispatchMessageW
DialogBoxParamW
DestroyWindow
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreateWindowExW
CreateDialogParamW
CloseClipboard
CheckRadioButton
CheckMenuItem
CharUpperBuffW
CallWindowProcW
CallNextHookEx
BeginPaint
OpenClipboard
gdi32
CreateSolidBrush
CreateFontIndirectW
CreateDIBitmap
CreateCompatibleDC
DeleteObject
DeleteDC
TranslateCharsetInfo
TextOutW
StretchBlt
SetTextColor
SetStretchBltMode
SetBkColor
SelectObject
PatBlt
GetTextMetricsW
GetTextFaceW
GetTextExtentPointW
GetTextExtentPoint32W
GetStockObject
GetDeviceCaps
ExtTextOutW
Escape
BitBlt
comdlg32
CommDlgExtendedError
FindTextW
GetOpenFileNameW
GetSaveFileNameW
PrintDlgW
ChooseFontW
Sections
.text Size: 197KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 388B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xata1 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xata2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ