Static task
static1
Behavioral task
behavioral1
Sample
f3ff5abf8af7a05f18e29f5dc1d72c3b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f3ff5abf8af7a05f18e29f5dc1d72c3b_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f3ff5abf8af7a05f18e29f5dc1d72c3b_JaffaCakes118
-
Size
197KB
-
MD5
f3ff5abf8af7a05f18e29f5dc1d72c3b
-
SHA1
74e6d80ada7f63be88689b2687623c88ec7694df
-
SHA256
d85a232f492a6e7475304e171db520021edc0e3ee20a26646d23c162bb01f665
-
SHA512
72afd4ed19202dbde19ab7c1302b9ad85c9ca2b133b6c41677e109afcc79f3d80f83fcd9c0a824df40c09042118ee1be88c9b0fae295c9186a54afa5900c4a3b
-
SSDEEP
3072:sa9XKHIFleuW+5HbFDNo++7yRuk0pN9AbblnbfWlp0CnOruz:moFY3+Jr1z039AbbZ+IEOru
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3ff5abf8af7a05f18e29f5dc1d72c3b_JaffaCakes118
Files
-
f3ff5abf8af7a05f18e29f5dc1d72c3b_JaffaCakes118.exe windows:4 windows x86 arch:x86
9bd0e637c63d9849c31bc73354b175d6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
comdlg32
GetSaveFileNameA
comctl32
ImageList_GetBkColor
ImageList_Remove
ImageList_Destroy
ImageList_Draw
advapi32
RegEnumKeyExA
RegEnumKeyA
GetUserNameA
RegLoadKeyA
version
VerInstallFileA
VerQueryValueA
VerFindFileA
user32
GetClientRect
GetParent
GetDesktopWindow
MapVirtualKeyA
BeginPaint
DestroyMenu
EndPaint
MessageBeep
InsertMenuItemA
CallWindowProcA
GetSubMenu
KillTimer
DrawAnimatedRects
IsChild
LoadBitmapA
EnumChildWindows
DeleteMenu
WindowFromPoint
GetLastActivePopup
IsWindowVisible
ShowScrollBar
CreatePopupMenu
CharNextW
PostMessageA
RemovePropA
GetFocus
SetWindowPlacement
SetScrollInfo
SetScrollPos
EnumThreadWindows
ScrollWindow
SetClipboardData
GetMenuState
SetMenu
wsprintfA
OemToCharA
SetCapture
PostQuitMessage
DrawFrameControl
GetWindowTextA
FillRect
DrawMenuBar
GetKeyboardLayoutList
SendMessageW
GetMenuItemInfoA
GetForegroundWindow
CloseClipboard
GetClipboardData
SetWindowTextA
EnableWindow
RegisterWindowMessageA
GetKeyboardState
SetForegroundWindow
InvalidateRect
EqualRect
ReleaseCapture
GetKeyboardLayoutNameA
InsertMenuA
DrawIconEx
GetClassInfoA
SetRect
UpdateWindow
GetWindowLongA
ShowWindow
GetDlgItem
GetWindowPlacement
GetMenuStringA
CreateWindowExA
GetMenu
SetParent
MapWindowPoints
ole32
GetHGlobalFromStream
shell32
Shell_NotifyIconA
SHGetSpecialFolderLocation
SHGetDiskFreeSpaceA
SHGetFolderPathA
SHGetDesktopFolder
gdi32
CopyEnhMetaFileA
GetObjectA
GetDIBits
SaveDC
GetDIBColorTable
kernel32
GetLastError
GetVersionExA
LoadLibraryA
IsBadReadPtr
VirtualAllocEx
GetCommandLineA
lstrlenA
GetACP
GlobalAlloc
GetProcAddress
ExitThread
GetModuleHandleA
ExitProcess
Sections
.text Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 126KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC0 Size: 512B - Virtual size: 49B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC5 Size: 512B - Virtual size: 237B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC1 Size: 1024B - Virtual size: 815B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC8 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC4 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC2 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ