Static task
static1
Behavioral task
behavioral1
Sample
26dcb283c9201e78606c502f03c2f255_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
26dcb283c9201e78606c502f03c2f255_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
26dcb283c9201e78606c502f03c2f255_JaffaCakes118
-
Size
159KB
-
MD5
26dcb283c9201e78606c502f03c2f255
-
SHA1
728f8370b53f24f742bb4e1bf90ddcbb3dc476ed
-
SHA256
023053dda2350f95683ddd607b9369d1247ad419ba6b147aded56c861fbb1704
-
SHA512
ce3ec0746fca510f7e4de20e57ddf5689e9b4a2a1edeef4dacb98966505c750b606ccb4c90847815f41d4f52b42c7d3391605707fd41daed0bf54d6677fa73d8
-
SSDEEP
3072:uiR8GRaD5k2pGoUOAFzAFFUQqU/AtZ9hOxQQ7iLcJyOGeKdj37:/cDbaOAFz8FUQZotZqxQTccOQj3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26dcb283c9201e78606c502f03c2f255_JaffaCakes118
Files
-
26dcb283c9201e78606c502f03c2f255_JaffaCakes118.exe windows:1 windows x86 arch:x86
b83b6fc80da69b8f65e7905e65089f0c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FileTimeToLocalFileTime
SetPriorityClass
SetEvent
TlsAlloc
GetVersion
RtlUnwind
WriteFile
HeapAlloc
FindResourceA
IsValidCodePage
MapViewOfFile
SetFilePointer
GetLocaleInfoA
IsBadStringPtrW
GetModuleFileNameA
GetStartupInfoA
SetHandleCount
GetOEMCP
GetNumberFormatA
GetFileType
GetProcAddress
OpenEventA
SetEndOfFile
WriteConsoleW
LocalFree
IsBadStringPtrA
LoadLibraryA
GetSystemInfo
GetTimeFormatA
GetStringTypeW
lstrlenA
GlobalAlloc
GetModuleHandleA
HeapSize
LCMapStringW
lstrcpynA
ReadProcessMemory
GetFileAttributesA
TlsSetValue
GetCommandLineW
LoadResource
user32
TranslateMessage
TrackPopupMenuEx
InflateRect
DialogBoxParamA
MessageBoxA
SetCapture
DrawIconEx
CheckMenuRadioItem
ChildWindowFromPoint
SendMessageTimeoutA
SetUserObjectSecurity
ClientToScreen
OpenClipboard
InsertMenuA
ModifyMenuA
SetWindowTextA
GetDlgCtrlID
FindWindowExA
LoadCursorA
RedrawWindow
DrawTextA
LoadImageA
IsDialogMessageA
EnableWindow
CheckRadioButton
DrawEdge
GetDlgItemTextA
GetUserObjectSecurity
CreateWindowExA
IsWindowVisible
GetSysColorBrush
GetParent
InvalidateRgn
SetDlgItemTextA
GetUpdateRgn
GetScrollInfo
GetMessageA
InvalidateRect
GetWindowRect
SetClassLongA
LoadAcceleratorsA
msvcrt
_controlfp
memcpy
__setusermatherr
_initterm
__p__commode
_except_handler3
__getmainargs
exit
_XcptFilter
__set_app_type
_acmdln
__p__fmode
_adjust_fdiv
_exit
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ