Static task
static1
Behavioral task
behavioral1
Sample
1218a1ab7ec5c1f28e9ce36edc2c193f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1218a1ab7ec5c1f28e9ce36edc2c193f_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
1218a1ab7ec5c1f28e9ce36edc2c193f_JaffaCakes118
-
Size
360KB
-
MD5
1218a1ab7ec5c1f28e9ce36edc2c193f
-
SHA1
88d4b2b883036455f495e392e6a9376a1674ad1e
-
SHA256
2875ef78db576d8dac1c234af20791475f9d219747d73a4dae32b259976813a4
-
SHA512
cf0525228b29ad309f5a2e4973d9433b9ad16944cd311bbaf42be6864b5922e9f853de1053a7ead32512fc54869a13298ea2a849c2e785de8730c9befd95974f
-
SSDEEP
6144:tstA3uXkkVXHtV09Cs45XekqHMasLjVy8uxO3cuOWSwiOOYS96q03pEc0K7c:tZ+02XHrEtoeks+88uxO3cuOWSwvVy6S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1218a1ab7ec5c1f28e9ce36edc2c193f_JaffaCakes118
Files
-
1218a1ab7ec5c1f28e9ce36edc2c193f_JaffaCakes118.exe windows:4 windows x86 arch:x86
cc1999674871ba1b96236309f2ebf303
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetFullPathNameA
CloseHandle
CreateThread
GetCommandLineA
ExpandEnvironmentStringsA
ExitProcess
GetLastError
GetModuleHandleA
Sleep
GetWindowsDirectoryA
CreateDirectoryA
WaitForSingleObject
GetExitCodeProcess
ReadFile
SetCurrentDirectoryA
FindClose
GlobalFree
MoveFileA
GetVersion
SetFilePointer
GetTempPathA
GetFileSize
GetDiskFreeSpaceA
FindNextFileA
GlobalUnlock
CreateFileA
MulDiv
GetProcAddress
RemoveDirectoryA
GetTickCount
GetPrivateProfileStringA
CreateProcessA
GlobalAlloc
GetShortPathNameA
WritePrivateProfileStringA
WriteFile
DeleteFileA
SetFileTime
GetTempFileNameA
SearchPathA
GetFileAttributesA
LoadLibraryA
GetModuleFileNameA
FreeLibrary
FindFirstFileA
CompareFileTime
comctl32
ord17
ImageList_Read
shell32
SHGetFileInfoA
SHGetPathFromIDListA
SHFileOperationA
SHGetSpecialFolderLocation
advapi32
RegEnumKeyA
RegQueryValueExA
RegCloseKey
gdi32
PlayMetaFileRecord
CreateBrushIndirect
GetDeviceCaps
PlgBlt
Escape
PolyPolygon
user32
SetWindowPos
GetDC
ShowWindow
SystemParametersInfoA
OpenClipboard
SetWindowTextA
IsWindowVisible
GetDlgItemTextA
EndDialog
GetMessagePos
ScreenToClient
GetClientRect
CreateDialogParamA
CreateWindowExA
GetClassInfoA
RegisterClassA
BeginPaint
TrackPopupMenu
EnableWindow
EmptyClipboard
CheckDlgButton
wsprintfA
CloseClipboard
DialogBoxParamA
FillRect
InvalidateRect
EndPaint
IsWindowEnabled
SendMessageA
GetDlgItem
AppendMenuA
DrawTextA
LoadCursorA
SetForegroundWindow
GetSystemMenu
PeekMessageA
IsWindow
DefWindowProcA
GetWindowRect
SetClipboardData
LoadImageA
CharNextA
GetSystemMetrics
DispatchMessageA
SetWindowLongA
SetTimer
PostQuitMessage
SetCursor
SendMessageTimeoutA
SetDlgItemTextA
GetSysColor
CreatePopupMenu
SetClassLongA
LoadBitmapA
FindWindowExA
CharPrevA
Sections
.text Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 248KB - Virtual size: 247KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 54B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ