Static task
static1
Behavioral task
behavioral1
Sample
02fb97385e797dd7307e574e12515d09_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
02fb97385e797dd7307e574e12515d09_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
02fb97385e797dd7307e574e12515d09_JaffaCakes118
-
Size
33KB
-
MD5
02fb97385e797dd7307e574e12515d09
-
SHA1
8bcf2ecdba0a666496e4051240ab3af8273376e0
-
SHA256
2d87e07eaa6dce042084f8705a863b0b887a04ae3b56bd23ec3cc6c22d71fced
-
SHA512
44c4b7bbc0f96add3e0a9f06433a924f8670ee340be1b9617ca177c1faa611b9e6f43f6eb2e00a84fafa7bd27dfc058af942de5be3e0be378358645d7e1282fd
-
SSDEEP
768:tgJ7F5RICaLXLJXDbtd7sBQNmD4qVB9O0WHqH:tEF5xsLRD5uBQUDpB9PWC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02fb97385e797dd7307e574e12515d09_JaffaCakes118
Files
-
02fb97385e797dd7307e574e12515d09_JaffaCakes118.exe windows:4 windows x86 arch:x86
ca290343b5c0bad4441c48560c545286
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GlobalFree
SetConsoleOS2OemFormat
GetAtomNameW
GetCalendarInfoA
FindClose
SetCommState
OpenEventA
GlobalGetAtomNameA
CreateThread
SetFileAttributesA
GetPrivateProfileStringW
FindFirstVolumeMountPointA
EnterCriticalSection
ExpandEnvironmentStringsA
WritePrivateProfileStringW
VirtualProtect
UpdateResourceW
_lwrite
RequestDeviceWakeup
DeleteFiber
UnhandledExceptionFilter
GlobalUnWire
ExitProcess
WriteConsoleOutputA
LocalSize
CreateDirectoryA
CompareStringW
GetPrivateProfileSectionNamesW
user32
CreatePopupMenu
SetConsoleReserveKeys
DrawAnimatedRects
GetWindowModuleFileNameA
mouse_event
WinHelpW
InternalGetWindowText
DdeAddData
GetTabbedTextExtentW
UserLpkPSMTextOut
GetClipCursor
SetScrollPos
GetWindowDC
SetKeyboardState
GetComboBoxInfo
SetUserObjectInformationA
UnionRect
GetNextDlgGroupItem
LoadStringW
GetMenuInfo
EnumDisplaySettingsW
SetMenuItemBitmaps
IsWindow
GetListBoxInfo
CountClipboardFormats
EnumWindows
GetMessageW
CharPrevExA
SendMessageA
BroadcastSystemMessage
GetProcessDefaultLayout
DdeDisconnectList
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE