Static task
static1
Behavioral task
behavioral1
Sample
179091c04da7e234d6e0913c20c2aabe_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
179091c04da7e234d6e0913c20c2aabe_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
179091c04da7e234d6e0913c20c2aabe_JaffaCakes118
-
Size
166KB
-
MD5
179091c04da7e234d6e0913c20c2aabe
-
SHA1
350578fdda54ad47bc023cbf391683fad7343fa2
-
SHA256
87ef9667ec57b39e61c3a40369ac2f325ffde3c8201469b03f0b5b749b97eeb9
-
SHA512
ca3e14f43e3b80bb51e09c8298c2c090d444c6d20e356ca3c61fbe4f44a8d37391d288e55b5de69c71ee43cebda71af41e8227b560f97431b5f8452520ff66fe
-
SSDEEP
3072:+Mw5O9BbihenhpM0H6UvifXITK52IsF1YPSStvYleGUhCif5sDePW:Twk9B60agivI+DOYNv6ezSmW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 179091c04da7e234d6e0913c20c2aabe_JaffaCakes118
Files
-
179091c04da7e234d6e0913c20c2aabe_JaffaCakes118.exe windows:4 windows x86 arch:x86
6034d921b3bd5ba5face117b9ccdf863
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
TlsAlloc
VirtualQuery
HeapAlloc
QueryPerformanceCounter
HeapReAlloc
VirtualAlloc
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualFree
EnumSystemLanguageGroupsW
IsBadWritePtr
HeapDestroy
GetWriteWatch
HeapCreate
SetLastError
TlsFree
oleacc
CreateStdAccessibleObject
AccessibleChildren
ole32
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID
winmm
mciSendCommandA
sndPlaySoundA
user32
GetDlgItem
CreateWindowExA
LoadStringA
SetWindowTextA
LoadImageA
GetWindow
DestroyIcon
GetParent
msimg32
AlphaBlend
TransparentBlt
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 401KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ