Static task
static1
Behavioral task
behavioral1
Sample
07cba66626a9fce93a1245a03712534e_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
07cba66626a9fce93a1245a03712534e_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
07cba66626a9fce93a1245a03712534e_JaffaCakes118
-
Size
285KB
-
MD5
07cba66626a9fce93a1245a03712534e
-
SHA1
a7639196a06d088f137bd90da33bdcbfc445341b
-
SHA256
c35210530dddc118e34605aeb8a0bfa4cf15f3bd712cbe7347cf8f842172b6ca
-
SHA512
855a91d1be06091340dbe4dc906c73d7213dc7f3fdfb8ea1b382755f6c22a2b4e1f816d020f3912ce0ced5f62eb562eec842acaef40b1c46105792d2c282e80a
-
SSDEEP
6144:T5LSFRokoJisYAPV0spqrR2CAvND2NeinwkiEyMuD:FgRRnjAqsp0RbjNXw1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07cba66626a9fce93a1245a03712534e_JaffaCakes118
Files
-
07cba66626a9fce93a1245a03712534e_JaffaCakes118.exe windows:4 windows x86 arch:x86
994744ef9a2c4fc82d453f5d07ea67d8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegSetValueExW
RegOpenKeyExA
RegOpenKeyW
user32
PostMessageW
GetFocus
UnregisterClassW
LoadAcceleratorsW
RegisterClassW
EndPaint
SetWindowTextW
DispatchMessageW
SetWindowLongW
GetWindowRect
RedrawWindow
MsgWaitForMultipleObjects
GetCursorPos
DrawFrameControl
MessageBoxW
UnionRect
GetDesktopWindow
MessageBeep
FillRect
GetWindowThreadProcessId
SendMessageW
DestroyWindow
MoveWindow
CloseClipboard
GetDC
ShowCaret
ClientToScreen
PostQuitMessage
CreatePopupMenu
HideCaret
ReleaseDC
FlashWindow
GetAsyncKeyState
PeekMessageW
OffsetRect
SetScrollInfo
TrackPopupMenu
ExitWindowsEx
LoadCursorW
GetWindowTextW
CreateDialogIndirectParamW
GetUpdateRgn
GetWindowLongW
DestroyAcceleratorTable
kernel32
InterlockedIncrement
GetStringTypeW
InterlockedDecrement
HeapReAlloc
VirtualAlloc
GetACP
GetOEMCP
LeaveCriticalSection
HeapAlloc
GetCPInfo
MultiByteToWideChar
LoadLibraryA
GetProcAddress
LCMapStringW
LCMapStringA
GetStringTypeA
GetCurrentThreadId
GetStdHandle
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetModuleFileNameA
GetCurrentProcess
UnhandledExceptionFilter
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
GetVersionExA
GetModuleHandleA
GetEnvironmentVariableA
TlsGetValue
SetLastError
GetLastError
RtlUnwind
HeapFree
HeapCreate
VirtualFree
InitializeCriticalSection
WriteFile
EnterCriticalSection
TerminateProcess
GetVersion
ExitProcess
TlsSetValue
CreateThread
CreateFileA
GetCommandLineA
CreateFiber
ConvertThreadToFiber
TlsAlloc
CloseHandle
Sections
.text Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ