Static task
static1
Behavioral task
behavioral1
Sample
18caef5adb49337b948bb275d01e81f5_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
18caef5adb49337b948bb275d01e81f5_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
18caef5adb49337b948bb275d01e81f5_JaffaCakes118
-
Size
131KB
-
MD5
18caef5adb49337b948bb275d01e81f5
-
SHA1
0da8e407c420a3ae83a9b8586b740457dc402dcd
-
SHA256
e4db8d28dcacd7417efb1636ea92604c97e6c84715295afbc75435ab2eaee56d
-
SHA512
5e6e91655a7e6284d1933d9b2eae5240feb9d5a60b7542ea748549541e8860f20cbde42f4f646d46e592228346fb98e2d08217e7f674652b0c6e847ae67bb1e8
-
SSDEEP
3072:ovz9U3rRLnikG8oJA6V5XBrycLSZyhEPh6EvD5hE0Xo0JK26jubq5t:ovz9crRLnikG8IrTNycLeyhEPFvNhTXy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18caef5adb49337b948bb275d01e81f5_JaffaCakes118
Files
-
18caef5adb49337b948bb275d01e81f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
8599995c5ff30d9dbcbbed269a4041c2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
FileTimeToSystemTime
FindFirstFileA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStdHandle
GetVersionExA
GlobalLock
IsDebuggerPresent
LoadLibraryA
OutputDebugStringA
RtlUnwind
TlsAlloc
VirtualAlloc
VirtualFree
user32
DestroyMenu
DispatchMessageA
EnableMenuItem
FillRect
GetSysColor
GetWindowThreadProcessId
LoadCursorA
PeekMessageA
SetFocus
SetWindowTextA
SystemParametersInfoA
TranslateMessage
gdi32
CreateBrushIndirect
CreateDIBitmap
CreateRectRgn
CreateSolidBrush
DeleteObject
GetWindowOrgEx
RestoreDC
SelectPalette
SetEnhMetaFileBits
SetPixel
SetViewportExtEx
UnrealizeObject
shell32
DragFinish
SHAddToRecentDocs
SHFileOperationW
SHGetFileInfoA
SHGetPathFromIDListA
Shell_NotifyIconA
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ