Static task
static1
Behavioral task
behavioral1
Sample
07d358f7fc712085d2499844f6ccd139_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
07d358f7fc712085d2499844f6ccd139_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
07d358f7fc712085d2499844f6ccd139_JaffaCakes118
-
Size
107KB
-
MD5
07d358f7fc712085d2499844f6ccd139
-
SHA1
4b0d8093aa1e95c0330e68347beba984a4899a3e
-
SHA256
cbd9339a27e7749796b712b1006a1fa1ad7b68d9244e78a8f6f49b483053f900
-
SHA512
9e36743dcec7d63beac3101354c091927aa95cd583f785760aa69aba144633ee2747ba5f891945c076c39579cb8296d4271ebf2467c2de3d67e905d959e87dc1
-
SSDEEP
3072:wkje5bLa3qs+fLUdSZhomJlbiB4S14jWGB:wkje5na3JhQZaYbiB9CjRB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07d358f7fc712085d2499844f6ccd139_JaffaCakes118
Files
-
07d358f7fc712085d2499844f6ccd139_JaffaCakes118.exe windows:4 windows x86 arch:x86
c12b2011ed3c7046220c5744daf2ce6b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetClipboardData
SetDlgItemTextA
SetTimer
SetCaretPos
SendMessageA
SetCapture
ShowCaret
ShowWindow
TranslateMessage
UpdateWindow
ReleaseCapture
RegisterClassA
PostQuitMessage
OpenClipboard
MessageBoxA
LoadCursorA
KillTimer
InvalidateRect
HideCaret
GetWindowRect
GetSystemMetrics
GetMessageA
GetDC
EndPaint
GetCursorPos
GetClipboardData
DispatchMessageA
EndDialog
DragDetect
DefWindowProcA
DialogBoxParamA
DestroyWindow
CloseClipboard
CreateWindowExA
CreateCaret
SetWindowPos
BeginPaint
SetWindowRgn
kernel32
lstrlenA
lstrcpyA
Sleep
LoadLibraryA
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GetProcAddress
GetModuleHandleA
FreeLibrary
ExitProcess
CreateThread
gdi32
TextOutA
SetTextColor
SelectObject
GetCharWidthA
SetBkMode
CreatePolygonRgn
CreateEllipticRgn
DeleteObject
CreateCompatibleDC
CombineRgn
CreateDIBitmap
BitBlt
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 91KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE