Static task
static1
Behavioral task
behavioral1
Sample
0782e59589309802ccee63e341798c8f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0782e59589309802ccee63e341798c8f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0782e59589309802ccee63e341798c8f_JaffaCakes118
-
Size
237KB
-
MD5
0782e59589309802ccee63e341798c8f
-
SHA1
0c2511bc5c0dfaeac5333fd36eadfd2752f4bb1a
-
SHA256
0691e7ed2750ca46350ef26b05fb5a97ae937eac4d70a76bd1bac4e2bad852b3
-
SHA512
3ea203e82a289774a47f58c2250d8455ba6321beb25a71b209e60ab709216bd3c51aa74f0ab6516f25d224705200a08cc2ae36a4978e04bd56c0caac133300b1
-
SSDEEP
6144:XGnRvoAIBjgHA+et3Bwqg555DoygfXia9aa:XGn2AIBs5etxU5M1h7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0782e59589309802ccee63e341798c8f_JaffaCakes118
Files
-
0782e59589309802ccee63e341798c8f_JaffaCakes118.exe windows:4 windows x86 arch:x86
0006388335d76c25e9f6e737dbb6c03a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EnumWindows
GetWindowThreadProcessId
GetWindowTextA
IsWindowVisible
wsprintfW
wsprintfA
kernel32
SizeofResource
GetProcessHeap
GetProcAddress
EnumResourceLanguagesA
GlobalAddAtomW
LoadResource
FindNextFileW
SetLastError
HeapAlloc
FindResourceExA
EnumResourceNamesA
MultiByteToWideChar
EnumResourceNamesA
InterlockedExchange
FindFirstFileA
FormatMessageA
HeapFree
GetModuleHandleA
EnumResourceTypesA
GetCurrentDirectoryA
LoadLibraryW
CloseHandle
RaiseException
GetCurrencyFormatA
LocalFree
GlobalFree
FindFirstFileW
LockResource
GetLastError
GetCommandLineA
Sleep
setupapi
CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyA
CM_Get_DevNode_Status
Sections
.text Size: 150KB - Virtual size: 285KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 130KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ