Static task
static1
Behavioral task
behavioral1
Sample
1bbfec2195ad08787a3023d469b9dcd5_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
1bbfec2195ad08787a3023d469b9dcd5_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1bbfec2195ad08787a3023d469b9dcd5_JaffaCakes118
-
Size
400KB
-
MD5
1bbfec2195ad08787a3023d469b9dcd5
-
SHA1
fbca52abb9dee200ee3704ba3f041c0ec4bbc132
-
SHA256
7ee1bb34e526c1d6e9e1d8b053a595f09066c7f18d8198047ff816a617ae33f8
-
SHA512
55b2bf9748a051f630290d6347f53b64289db3d4c5cd66ddec222a7112260aff2def97eaff2c8963e477f4bf3b29b5921a21f0a39027424c2270c5559337ae31
-
SSDEEP
12288:EF4IHF7DmgK85BXt8uPPaagLR5zYGJoiU2od3076:SnF3mgK85N3aLF5zYyURd3076
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1bbfec2195ad08787a3023d469b9dcd5_JaffaCakes118
Files
-
1bbfec2195ad08787a3023d469b9dcd5_JaffaCakes118.exe windows:26898 windows x86 arch:x86
c33e571e9c03f3cbd915c9f2e75dedd1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapDestroy
GetCommandLineA
GetVersionExA
lstrcmpiW
SetFilePointer
WriteFile
InterlockedIncrement
VirtualAlloc
MultiByteToWideChar
GetCommandLineA
GetCommandLineA
CreateFileW
VirtualAlloc
WriteFile
GetACP
GetCurrentProcess
GetStartupInfoW
GetModuleFileNameA
SetEvent
VirtualFree
VirtualAlloc
GetACP
GetStartupInfoA
VirtualAlloc
HeapDestroy
ExitProcess
HeapDestroy
InterlockedIncrement
InterlockedIncrement
QueryPerformanceCounter
LocalFree
GetModuleHandleA
GetCurrentThreadId
user32
MapWindowPoints
IsDialogMessageW
PostMessageW
IsWindowVisible
GetMessageW
CharNextW
GetParent
SetTimer
MessageBeep
FindWindowW
ScreenToClient
GetWindowLongW
MessageBoxA
BeginPaint
FillRect
GetDC
MoveWindow
KillTimer
MessageBeep
MoveWindow
MapWindowPoints
SetWindowLongW
GetWindowRect
ReleaseDC
GetMenu
IsDialogMessageW
CheckDlgButton
BeginPaint
LoadStringW
GetKeyState
GetWindowLongW
IsWindowVisible
EndDialog
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 388KB - Virtual size: 964KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ