Static task
static1
Behavioral task
behavioral1
Sample
068e1e0466e13d25a511ddf9c142d683_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
068e1e0466e13d25a511ddf9c142d683_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
068e1e0466e13d25a511ddf9c142d683_JaffaCakes118
-
Size
60KB
-
MD5
068e1e0466e13d25a511ddf9c142d683
-
SHA1
93c421889d5063878ce7d0946b5bb0de774492ad
-
SHA256
6c2e07551526dfb5847fc62accb48f919f9f6e05f9754d00ce33008a0480752e
-
SHA512
02609f57ed6306314822f91451117f85d0d0d09d9e6670dc7347011e531322815a54fc49c4f8bdb09306c13eddc4fbc3030aaec7e9d68c201da32f4142d944b1
-
SSDEEP
768:/L2aSGrVeTuHUjx3PUDXvU+pOqoKhDTz/rwv9K1PrDakU8LkCI4WZea1ftmJrV:/LndeRIOEhDni9K1HaX8Hv8tG5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 068e1e0466e13d25a511ddf9c142d683_JaffaCakes118
Files
-
068e1e0466e13d25a511ddf9c142d683_JaffaCakes118.exe windows:4 windows x86 arch:x86
406ef82d2695b720140d0d4521008114
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WideCharToMultiByte
GetDriveTypeW
SizeofResource
SetEndOfFile
FindNextFileW
GetVersion
FileTimeToSystemTime
GetFileAttributesExW
LoadResource
SuspendThread
LoadLibraryA
FindResourceW
SetFilePointer
DeleteFileW
GlobalDeleteAtom
GlobalUnlock
GlobalLock
SetCurrentDirectoryW
GetLogicalDrives
ReadFile
TerminateThread
GetPrivateProfileStringW
FindFirstFileW
GetCurrentProcess
FindNextChangeNotification
QueryDosDeviceW
SetEvent
DuplicateHandle
GlobalFree
LockResource
GetSystemTime
GetProcAddress
user32
SetCapture
OffsetRect
GetSysColor
UpdateWindow
GetCursorPos
VkKeyScanW
GetWindowThreadProcessId
SetCursor
LoadStringW
GetMessageW
GetKeyState
ReleaseCapture
EnableWindow
ReleaseDC
SystemParametersInfoW
WindowFromPoint
SetWindowTextW
SetForegroundWindow
wsprintfW
gdi32
CreateSolidBrush
SetBkColor
SetTextColor
SetBkMode
SetDIBits
DeleteDC
GetStockObject
MoveToEx
CreateICW
advapi32
RegCreateKeyExW
RegDeleteValueW
StartServiceW
RegQueryValueExW
LookupPrivilegeValueW
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE