Static task
static1
Behavioral task
behavioral1
Sample
ffc0887f3589b4d2af512bad4afc7349_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ffc0887f3589b4d2af512bad4afc7349_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ffc0887f3589b4d2af512bad4afc7349_JaffaCakes118
-
Size
261KB
-
MD5
ffc0887f3589b4d2af512bad4afc7349
-
SHA1
6f06af4e3cb6afb772179f16657b770ee9ef4a3b
-
SHA256
eb06b06e8ca98136027ad3aa5f873f9a4af34141f7f6c9071e14d41df6fe2afd
-
SHA512
ae9009ba1626a2e100a865f675b181e9420fd1727486887a675253aa7688c1918081d508f54ecdb84eb49033ee76fff2353a318bc3ee63674f07c03103577986
-
SSDEEP
6144:96aGmgBm3w8gzPjD44e3RJQ8U7OF1sW8dWvYkWGKsHz4wnh:9lP3AzPj84MrQbsfvYov4w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffc0887f3589b4d2af512bad4afc7349_JaffaCakes118
Files
-
ffc0887f3589b4d2af512bad4afc7349_JaffaCakes118.exe windows:4 windows x86 arch:x86
366e5a38496d9a866e75c30e63b77ba3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
CharLowerA
GetPropA
WindowFromPoint
PtInRect
CloseClipboard
DispatchMessageA
SendMessageA
GetLastActivePopup
InvalidateRect
GetSubMenu
TranslateMDISysAccel
GetKeyboardLayout
GetMenuItemCount
UnregisterClassA
AdjustWindowRectEx
LoadKeyboardLayoutA
FillRect
SetActiveWindow
IsWindowEnabled
DefMDIChildProcA
GetClassNameA
DefFrameProcA
IsWindowVisible
GetWindow
GetKeyboardType
GetMenu
SetScrollInfo
MapWindowPoints
GetFocus
IsRectEmpty
GetScrollInfo
GetKeyboardState
DrawIcon
EnumWindows
IsWindowUnicode
GetKeyboardLayoutList
CallNextHookEx
GetIconInfo
wsprintfA
RemovePropA
InflateRect
GetClassInfoA
DrawMenuBar
FrameRect
IntersectRect
CharLowerBuffA
SetMenu
GetMessagePos
ActivateKeyboardLayout
GetDCEx
MessageBoxA
BeginPaint
IsDialogMessageW
SetMenuItemInfoA
SetWindowLongA
IsZoomed
GetForegroundWindow
GetMenuStringA
GetMenuItemInfoA
IsWindow
CallWindowProcA
GetCursor
MsgWaitForMultipleObjects
EnableMenuItem
InsertMenuA
SetRect
SetPropA
DeleteMenu
RegisterClipboardFormatA
GetSysColor
SetFocus
TranslateMessage
DestroyIcon
IsChild
GetDlgItem
DrawTextA
IsIconic
CreateMenu
GetDesktopWindow
CharToOemA
GetClientRect
DrawAnimatedRects
SetParent
GetSystemMenu
GetClipboardData
GetWindowLongA
InsertMenuItemA
SetClassLongA
GetDC
CheckMenuItem
IsDialogMessageA
GetKeyboardLayoutNameA
GetClassLongA
gdi32
CreateBitmap
SetBkColor
CreateFontIndirectA
GetDIBColorTable
SetBkMode
CopyEnhMetaFileA
GetObjectA
BitBlt
kernel32
SetEndOfFile
SetFilePointer
lstrlenA
GetProcAddress
LoadLibraryA
SizeofResource
GetModuleHandleA
RaiseException
GetCommandLineW
lstrcmpiA
LocalFree
SetHandleCount
VirtualAllocEx
IsBadHugeReadPtr
SetEvent
MoveFileExA
HeapDestroy
ReadFile
lstrcmpA
VirtualAlloc
IsBadReadPtr
VirtualQuery
ResetEvent
GetACP
ExitThread
SetLastError
ExitProcess
SetThreadLocale
GetLastError
lstrcpynA
WaitForSingleObject
WriteFile
WideCharToMultiByte
Sections
.text Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 163KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES50 Size: 512B - Virtual size: 181B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES06 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES72 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES18 Size: 1024B - Virtual size: 657B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES45 Size: 512B - Virtual size: 299B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES52 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES40 Size: 1024B - Virtual size: 913B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES08 Size: 1024B - Virtual size: 767B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ