Static task
static1
Behavioral task
behavioral1
Sample
8aae12fd6127ed61fe5bd3328323829c_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
8aae12fd6127ed61fe5bd3328323829c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
8aae12fd6127ed61fe5bd3328323829c_JaffaCakes118
-
Size
148KB
-
MD5
8aae12fd6127ed61fe5bd3328323829c
-
SHA1
1c9c37bdfe299d1574ed34e471458b803619b613
-
SHA256
81adf9d7693f06ff7e097711c519279fcea7b8856b9a73ca70690e5ae03dd39a
-
SHA512
1f564faf16de59e9405d64db2cd2dd1d4d7e977a36554b91b8b7dffae493b6fd80b001b70f3253c0008839ddcff9f365b195ea3682e56676d3260b0272fbfc9d
-
SSDEEP
1536:MH7JM9X692fvprGCMK11fGpXve+OtjRsaxd7iHCtEx076yhog08wRonq/ZKBIx/w:oW9TprVvQeBP7+CtqQogzmovBIZYz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8aae12fd6127ed61fe5bd3328323829c_JaffaCakes118
Files
-
8aae12fd6127ed61fe5bd3328323829c_JaffaCakes118.exe windows:4 windows x86 arch:x86
209700c0fab38841a1b167295a7b86f3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetRect
GetThreadDesktop
WinHelpA
ShowScrollBar
WindowFromDC
CharUpperA
GetScrollPos
InSendMessage
GetUserObjectInformationW
GetWindowRect
DrawTextExW
SetCaretPos
GetClipboardOwner
CopyIcon
GetDesktopWindow
FindWindowA
SetPropA
WindowFromPoint
SetWindowTextA
CountClipboardFormats
AppendMenuW
MapDialogRect
DestroyCursor
GetWindowDC
GetKeyboardLayout
CharPrevA
SetMenuDefaultItem
SetCapture
SendMessageTimeoutW
GetCaretBlinkTime
PostQuitMessage
BeginPaint
CreateIconIndirect
ShowWindow
LoadIconA
GetLastActivePopup
GetProcessWindowStation
GetIconInfo
DrawFrameControl
FindWindowExA
CreateAcceleratorTableA
SetRectEmpty
DispatchMessageA
InvalidateRgn
SetScrollInfo
SetWindowContextHelpId
EndDeferWindowPos
OpenWindowStationW
MapVirtualKeyA
MessageBeep
EnableWindow
UnregisterHotKey
UpdateWindow
OpenClipboard
SetActiveWindow
DispatchMessageW
LoadStringA
GetSystemMenu
GetWindowTextA
OemToCharA
CharLowerA
SetTimer
GetCapture
SetDlgItemInt
DestroyWindow
CharNextA
IsCharAlphaA
GetDoubleClickTime
CharLowerBuffA
UnhookWindowsHookEx
FrameRect
SetMenu
DdeFreeStringHandle
IsWindowUnicode
GetMessageA
DdeConnect
MessageBoxIndirectW
kernel32
GetStartupInfoA
GetExitCodeProcess
GetCurrentProcess
GetCurrentThreadId
GetModuleHandleA
msvcrt
_controlfp
_lseeki64
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
pow
Sections
.text Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ