Static task
static1
Behavioral task
behavioral1
Sample
f221c5fea35f80fd05a3406e31e2a80c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f221c5fea35f80fd05a3406e31e2a80c_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f221c5fea35f80fd05a3406e31e2a80c_JaffaCakes118
-
Size
229KB
-
MD5
f221c5fea35f80fd05a3406e31e2a80c
-
SHA1
84647bec1670d53939f764415a0b6407a7fd4289
-
SHA256
9577e0d92a01d9ad883c7faba0720d305b2f8f92e623ed5fd5dedf5181e3646b
-
SHA512
7f8a95b497fd2ca617a276afdac43a8192c797cd3d2be585072566a27ecd19f848f05609f9861772c2b45d1ca1a17e4e756dd1a41ef6a1ce671592cf1b75e15a
-
SSDEEP
6144:rIGHuoPDxVMueA0J699Yyi0XxXSMU9Wv:rIGHPiA0JzyiGRShk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f221c5fea35f80fd05a3406e31e2a80c_JaffaCakes118
Files
-
f221c5fea35f80fd05a3406e31e2a80c_JaffaCakes118.exe windows:4 windows x86 arch:x86
de148f3a6addb89c494d4df323ee106c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
dinput
DirectInputCreateW
DirectInputCreateA
dsound
DirectSoundCaptureCreate
DirectSoundCreate
DirectSoundFullDuplexCreate
DirectSoundCreate8
shell32
SHBindToParent
SHGetPathFromIDListA
ShellExecuteExW
SHFileOperationA
user32
CreateIconFromResourceEx
CreateDesktopW
CreateCursor
CreateAcceleratorTableA
CopyImage
DefDlgProcA
CharToOemBuffA
CharPrevA
CharNextA
BeginPaint
wsprintfA
DeleteMenu
EnableMenuItem
EndPaint
ShowScrollBar
ShowCaret
MessageBoxA
GetFocus
CharUpperA
LoadAcceleratorsW
LoadCursorA
kernel32
CompareStringA
EnumResourceLanguagesW
lstrcpyA
lstrcmpA
WriteFile
TlsFree
SleepEx
Sleep
SetUnhandledExceptionFilter
RtlUnwind
ReadFile
RaiseException
InitializeCriticalSection
GetVersionExA
GetTimeFormatA
GetSystemTimeAsFileTime
GetStartupInfoA
GetPrivateProfileStringA
GetModuleHandleA
GetLocalTime
GetDateFormatA
GetCommandLineA
FindResourceA
ExitProcess
CloseHandle
Sections
.text Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ