Static task
static1
Behavioral task
behavioral1
Sample
f7b8713caed33d0c295801b43db86282_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f7b8713caed33d0c295801b43db86282_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f7b8713caed33d0c295801b43db86282_JaffaCakes118
-
Size
174KB
-
MD5
f7b8713caed33d0c295801b43db86282
-
SHA1
6bcfe3d70093d75978242074e176d4242cf91927
-
SHA256
6541fa6fc45a2c40464da18f49a6f347035e33299c5a5189691b435e7457eaa6
-
SHA512
41067dda8508895f90320c44700e9219f6665be34d6dee03515b314c0dc12b5dfe5d1352eae0c7c7900e2c02166e7f59a01cc8abbc43118a29d842d13cd3f7ad
-
SSDEEP
3072:LFZJvQ4ZzchCi8ulCNFQ1Xh4Oe/86PyJsKC7uOmykr5TB1/ieoYVubBX76VYujTV:TQeN7DJstHtoYobtGSyKnfm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7b8713caed33d0c295801b43db86282_JaffaCakes118
Files
-
f7b8713caed33d0c295801b43db86282_JaffaCakes118.exe windows:4 windows x86 arch:x86
7d4065b95fff28ed31ac510b4e3b2257
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetModuleHandleW
GetTempPathW
CloseHandle
CreateFileW
LoadLibraryA
FindFirstFileW
FindClose
GetFileType
CreateFileA
GetTempPathA
GetStartupInfoA
user32
GetWindowRect
CloseClipboard
GetWindow
ChangeDisplaySettingsW
ShowWindow
BeginPaint
gdi32
BitBlt
Rectangle
CreateRoundRectRgn
msvcrt
_controlfp
_except_handler3
__set_app_type
strlen
strcmp
strstr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ