Static task
static1
Behavioral task
behavioral1
Sample
1b58bbcf6875baf79961d21ff6dec6c4_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1b58bbcf6875baf79961d21ff6dec6c4_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1b58bbcf6875baf79961d21ff6dec6c4_JaffaCakes118
-
Size
346KB
-
MD5
1b58bbcf6875baf79961d21ff6dec6c4
-
SHA1
fa332a5d874a3a0e499f2f1991e5fa70fca1ab2c
-
SHA256
47dccad061ceefde8b83b65b608c7151ac428e25a47a31e606d37474f2c783ac
-
SHA512
0167d36f1c2bbb3c41345a042122c25e843408067576322d2249d58ed0677c35962c0587efa1248541590d5cbb059991df674b59141b287b08b669df9da6af27
-
SSDEEP
6144:OV90+JCwup5kDJbosyZYqoR7JhQCutCnrY3iBVt75vTcohRXjG9T7Jz:c0wCPpqNbosymdNxoiBVtdT/mxz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b58bbcf6875baf79961d21ff6dec6c4_JaffaCakes118
Files
-
1b58bbcf6875baf79961d21ff6dec6c4_JaffaCakes118.exe windows:5 windows x86 arch:x86
370b7b432719818fc83ee42b1153d62c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetBkColor
GetBrushOrgEx
GetCharWidthW
GetClipBox
GdiFlush
GetDeviceCaps
GetFontData
GetMapMode
GetMiterLimit
GetPixel
CreateCompatibleDC
CreatePalette
EqualRgn
EndDoc
Escape
FillPath
FillRgn
GetRelAbs
SetBkColor
GetTextFaceW
user32
CascadeWindows
CheckRadioButton
CreateWindowExW
ActivateKeyboardLayout
DefWindowProcW
DestroyIcon
DlgDirListW
DrawEdge
DrawIconEx
EndMenu
GetKeyNameTextW
GetMessageW
GetMessageTime
GetPropW
GetScrollRange
UnhookWinEvent
VkKeyScanExW
ToAsciiEx
SetWindowLongW
SetTimer
kernel32
GlobalGetAtomNameW
GlobalLock
InitAtomTable
IsBadCodePtr
IsValidLocale
ReadFile
SetConsoleCP
GetModuleHandleW
VirtualProtect
GetPriorityClass
GetThreadLocale
GetTickCount
GetUserDefaultLangID
GlobalAlloc
ExitProcess
SetConsoleMode
GetStdHandle
GetProcessVersion
Sections
.text Size: 80KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 249KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE