Static task
static1
Behavioral task
behavioral1
Sample
f42674bcca982f1da5e6764dd341680f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f42674bcca982f1da5e6764dd341680f_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f42674bcca982f1da5e6764dd341680f_JaffaCakes118
-
Size
312KB
-
MD5
f42674bcca982f1da5e6764dd341680f
-
SHA1
7ad5a9f384a738670084125bab03b0502161f463
-
SHA256
d96079a8e9c3ba6d5328933c8600c973164d7fbdb500e89c5244fb48a0493754
-
SHA512
ee7968e6c1c54ba251a05dd0edb2510d2b8d867188725589e5bf2d4e3ea280453c4e45984b5af5e937b5c253f07cb70d34d033a44a0aeb40306d6c4bea69e737
-
SSDEEP
6144:fzvooPsfEl5w3wYdss8yNc5f8OXdHWv2U+UV+Klt0oOCXd3Dirq:fzvooEUw3wYiJyNcuY2v2U+O+U0oOSdt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f42674bcca982f1da5e6764dd341680f_JaffaCakes118
Files
-
f42674bcca982f1da5e6764dd341680f_JaffaCakes118.exe windows:4 windows x86 arch:x86
7e618fdb204119b02b810d42df866f04
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
avifil32
AVIFileGetStream
AVIFileRelease
AVIFileInit
AVIStreamSetFormat
AVIFileCreateStreamA
AVIStreamGetFrameOpen
AVIStreamGetFrameClose
AVISaveOptions
AVIFileOpenA
AVIStreamRelease
AVIStreamInfoA
AVIStreamGetFrame
AVIMakeCompressedStream
AVIStreamWrite
user32
GetKeyState
EnumWindowStationsW
CreateWindowExA
DispatchMessageA
GetMessageA
SetCursor
ShowWindow
TranslateMessage
ReleaseCapture
GetClassLongA
SetCapture
GetClassLongW
SetFocus
PeekMessageA
DefWindowProcA
CallWindowProcA
SetWindowTextA
BeginPaint
EndPaint
RegisterClassA
gdi32
SelectObject
SetStretchBltMode
CreateCompatibleDC
DeleteDC
StretchBlt
GetObjectA
SetDIBitsToDevice
FillRgn
GetStockObject
CombineRgn
CreateRectRgn
CreateDIBSection
StretchDIBits
GetCurrentObject
DeleteObject
BitBlt
SetDIBColorTable
kernel32
GetNumberOfConsoleInputEvents
CreateFileMappingA
UnmapViewOfFile
GetFileType
GlobalSize
CreateFileA
ExitProcess
GetFileSize
CloseHandle
MapViewOfFile
Sleep
ReadFile
WriteFile
lstrlenA
Sections
.text Size: 187KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 117KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 5KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ