Static task
static1
Behavioral task
behavioral1
Sample
07e72c6b95f78f05a0f78a98f28c8dbc_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
07e72c6b95f78f05a0f78a98f28c8dbc_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
07e72c6b95f78f05a0f78a98f28c8dbc_JaffaCakes118
-
Size
164KB
-
MD5
07e72c6b95f78f05a0f78a98f28c8dbc
-
SHA1
e407da6b4228330705f82af08e250b60350ecd5b
-
SHA256
decae934198d0fa153cfa7d503dce738af673b4a7c88efb91cb7c611f0f2f580
-
SHA512
d065a070df8d437e65198791bcee72818d75f6bf083dd2acb6260c67671a591cabd678812f0be0da7fdf6cb15f76d913b40757f78f9209702c57a7499e6cd1ba
-
SSDEEP
3072:CPJ2hI5tVCGH9whqDU1bvZmcEFTWcwEiIzKkL4o6OZz3gWeaS90vbSefN5W6hI+:CshIbVDdwDBpE1WHEiI3L4oZ0Wef90zw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07e72c6b95f78f05a0f78a98f28c8dbc_JaffaCakes118
Files
-
07e72c6b95f78f05a0f78a98f28c8dbc_JaffaCakes118.exe windows:4 windows x86 arch:x86
02b9215eb7497ed60121bacb9533e5fc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
GetKeyState
CharNextA
MessageBoxA
wsprintfW
GetTopWindow
CharUpperA
CharLowerA
advapi32
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
kernel32
GetThreadIOPendingFlag
GetLastError
LoadLibraryA
SetEndOfFile
InterlockedIncrement
TransmitCommChar
CompareStringW
CloseHandle
FlushFileBuffers
CreateFileW
GetTempPathW
MultiByteToWideChar
EnumResourceNamesW
FreeLibrary
LoadLibraryW
WideCharToMultiByte
InterlockedDecrement
IsBadReadPtr
CompareStringA
GetProcAddress
ExitProcess
SetStdHandle
CreateMutexA
WriteFile
GetModuleFileNameA
SetEnvironmentVariableA
msimg32
AlphaBlend
TransparentBlt
Sections
.text Size: 139KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 512B - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ