Static task
static1
Behavioral task
behavioral1
Sample
f93ad62426d005212384da4f6eb91c53_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f93ad62426d005212384da4f6eb91c53_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f93ad62426d005212384da4f6eb91c53_JaffaCakes118
-
Size
42KB
-
MD5
f93ad62426d005212384da4f6eb91c53
-
SHA1
dc53b20770a46a637675652ca1a49138785397d5
-
SHA256
c48314667cddf6bca8553a2ca4fc32618a0d377b9a7ff41c042ab360c2d8c5a5
-
SHA512
e9c52d7ffe5106523f807aa1a9ed3ec037a562cbf34acdaa450ab9a9a5dd6843fc02f80df3a624063cc44960706b2ec0c285926f78ec4836b8d30357844c6544
-
SSDEEP
768:lic3qqt1iIaYgFQDNgRh5Wa1OlRIOR8Z8kRj8SJgMrusLf592:0uLatQDNY3C8Z8ivJgYB92
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f93ad62426d005212384da4f6eb91c53_JaffaCakes118
Files
-
f93ad62426d005212384da4f6eb91c53_JaffaCakes118.exe windows:4 windows x86 arch:x86
25e456538392dab2599c28398a4151c5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_lwrite
VirtualProtect
ReadConsoleOutputCharacterA
GetLastError
UpdateResourceW
VirtualAllocEx
GetLargestConsoleWindowSize
ReadConsoleInputExW
CreateDirectoryExA
GetDriveTypeA
CreateWaitableTimerA
SetHandleCount
FindResourceA
CmdBatNotification
GetSystemDirectoryA
user32
DestroyMenu
SetDlgItemInt
VkKeyScanExW
SetConsoleReserveKeys
SetProcessDefaultLayout
LoadAcceleratorsA
SetActiveWindow
SetCaretBlinkTime
SetSystemMenu
MBToWCSEx
GetInternalWindowPos
TrackPopupMenu
GetPriorityClipboardFormat
EnumDesktopWindows
gdi32
UnrealizeObject
EnumEnhMetaFile
GetCharacterPlacementA
FontIsLinked
GetObjectW
EngLockSurface
SetWindowOrgEx
GetEnhMetaFileDescriptionW
GetCharWidthI
CreateRoundRectRgn
GdiGetLocalDC
DeviceCapabilitiesExW
GetGlyphOutline
GetLogColorSpaceA
IntersectClipRect
FixBrushOrgEx
GetWorldTransform
PtInRegion
CreateFontW
GetTextExtentPoint32W
EngStrokePath
XLATEOBJ_iXlate
EngCreateDeviceSurface
GetTextExtentPointW
GetTextFaceW
EndPage
CreateSolidBrush
GdiAddGlsBounds
CreateMetaFileW
BRUSHOBJ_pvGetRbrush
GdiGetDC
RemoveFontResourceW
comdlg32
Ssync_ANSI_UNICODE_Struct_For_WOW
dwLBSubclass
LoadAlterBitmap
CommDlgExtendedError
ChooseColorW
ChooseColorA
FindTextW
GetFileTitleA
GetSaveFileNameA
ReplaceTextW
PrintDlgExA
PageSetupDlgW
WantArrows
GetSaveFileNameW
ChooseFontW
GetOpenFileNameW
Sections
.text Size: 4KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE