Static task
static1
Behavioral task
behavioral1
Sample
f03294c918ea0cc8e667e4df4608b637_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f03294c918ea0cc8e667e4df4608b637_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f03294c918ea0cc8e667e4df4608b637_JaffaCakes118
-
Size
79KB
-
MD5
f03294c918ea0cc8e667e4df4608b637
-
SHA1
b1e01cd1fa5b699878ea6b94d15b4571ddfdc0f8
-
SHA256
ac73a71e8441b63a57c8271334727b9698a6c1848833fc162321770b51438659
-
SHA512
ac62c681e93eca4c41f39862d42bd40e332ed6d20693068682ef9c2beffc22ac129c6d17fd7f58fee3ceedf91c2c25e7894b4052ea050d68f85006775eedb900
-
SSDEEP
1536:tYM/ogo5yX1mIOjCy+9OKAq1AY0KOyYcRw2MJOnxMrIWE0EHqiAo7Lxaf6://oTyXcIECykfZ0KOncRdMIxM8WE08qe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f03294c918ea0cc8e667e4df4608b637_JaffaCakes118
Files
-
f03294c918ea0cc8e667e4df4608b637_JaffaCakes118.exe windows:4 windows x86 arch:x86
f105a1c8cc950a4716cf8b4189e0e211
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
msvcrt
__p__commode
signal
user32
CharNextA
CharToOemA
CheckMenuRadioItem
CreateIcon
DeferWindowPos
DefMDIChildProcA
DestroyCursor
DialogBoxParamA
DestroyCaret
DrawEdge
EqualRect
GetForegroundWindow
EnableWindow
GetMenuStringA
FindWindowExA
GetSubMenu
GetCursor
GetWindowTextLengthA
RegisterWindowMessageA
LoadBitmapA
OpenClipboard
GetMessagePos
GetWindowLongW
IsDialogMessageA
LoadKeyboardLayoutA
UpdateWindow
IsCharAlphaNumericA
IsRectEmpty
InsertMenuItemA
SetScrollRange
LoadIconW
PtInRect
LoadAcceleratorsA
WinHelpA
InvalidateRgn
wsprintfA
SystemParametersInfoA
LoadImageW
ScreenToClient
ScrollWindow
MessageBoxA
ScrollWindowEx
SetPropA
SetCapture
SetCursorPos
wsock32
WSAStartup
Sections
CODE Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE