Static task
static1
Behavioral task
behavioral1
Sample
0e1d549c1bd7f4f438ba2b95786d02ee_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0e1d549c1bd7f4f438ba2b95786d02ee_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0e1d549c1bd7f4f438ba2b95786d02ee_JaffaCakes118
-
Size
256KB
-
MD5
0e1d549c1bd7f4f438ba2b95786d02ee
-
SHA1
82ebf4450ed4a44d304765d913445741c295be2e
-
SHA256
826703fc551e5a8c695d23a1fe47d30cc26edc27ffbcbd8a1fea5019d58a63f1
-
SHA512
5a11d65101a93efb6fb961b5a5002f9fcdb9689b9192d96e6c975685040eb2a93be1a2b4b0db821bfba2248415dbf08e27d5875864035cbba5bc8af66c60046b
-
SSDEEP
6144:aAy9UvUuBOHGjOgz3YE3UOsrHdYofxoZ2yHsxbZG7Hd0ndi:aArvUuBOm9bWHANHe+i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e1d549c1bd7f4f438ba2b95786d02ee_JaffaCakes118
Files
-
0e1d549c1bd7f4f438ba2b95786d02ee_JaffaCakes118.exe windows:4 windows x86 arch:x86
1be5b40023ad4fbf66fd098990b07d64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
FindNextFileW
GetTimeFormatA
GetProcAddress
SetEvent
FindClose
lstrcatW
TlsAlloc
LoadLibraryA
LCMapStringA
GetModuleFileNameA
GetCurrentProcess
GetSystemInfo
lstrlenW
lstrcmpW
FreeLibrary
lstrcpynW
TlsGetValue
GetProcessHeap
GetModuleHandleW
WideCharToMultiByte
CloseHandle
user32
CharUpperW
DrawFocusRect
SendDlgItemMessageW
SetDlgItemTextW
GetFocus
GetWindowLongW
SetWindowTextW
TranslateAcceleratorW
CreatePopupMenu
ScreenToClient
GetWindowRect
DrawIcon
SystemParametersInfoW
mouse_event
GetMessageW
LoadStringW
gdi32
MoveToEx
EndPage
DeleteDC
CreateCompatibleBitmap
GetObjectW
SetBkColor
RemoveFontResourceW
AddFontResourceW
PatBlt
GetTextMetricsW
DPtoLP
CreatePen
LineTo
GetTextExtentPointW
SelectObject
SaveDC
CreateHatchBrush
comdlg32
ChooseColorW
GetOpenFileNameW
PrintDlgW
GetSaveFileNameW
advapi32
RegDeleteKeyW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
IsTextUnicode
RegQueryValueExW
RegDeleteValueW
RegQueryInfoKeyW
RegEnumKeyExW
ole32
OleDuplicateData
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 237KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ