Static task
static1
Behavioral task
behavioral1
Sample
29f72f4dcf90bbed3760f744cf8168a2_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
29f72f4dcf90bbed3760f744cf8168a2_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
29f72f4dcf90bbed3760f744cf8168a2_JaffaCakes118
-
Size
40KB
-
MD5
29f72f4dcf90bbed3760f744cf8168a2
-
SHA1
5f8109f0a2d90a6b0a958bea57e007a9664d1307
-
SHA256
d011a9afed467505da21033b83989a087c7b4e31f396d5c400a1b86c6b5a6854
-
SHA512
d84b00c37a14f0c45e6edb664a35f324e2add40596762f3c3733ab77df40504f4295e76774b0af8c2992802564ccc0f237753837fce710c713afb076450fd341
-
SSDEEP
768:SU77Rbfnh9Ye4tboIYrKiM/9vLmxDkoaWynn/weeinGfHum+cx0hw59p/VVOP1bS:SU7zye4t8uiMExZMnnYyGfHuEx0kpjOs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29f72f4dcf90bbed3760f744cf8168a2_JaffaCakes118
Files
-
29f72f4dcf90bbed3760f744cf8168a2_JaffaCakes118.exe windows:4 windows x86 arch:x86
555ab9a9dc305f8507147bd70746046d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
BeginUpdateResourceW
CreateToolhelp32Snapshot
EnumSystemCodePagesA
EnumTimeFormatsA
ExitProcess
FlushFileBuffers
GetCommModemStatus
GetCommandLineA
GetOEMCP
GetPrivateProfileIntA
GetPrivateProfileStringA
GetSystemDirectoryW
GetSystemTime
GetWindowsDirectoryA
GlobalCompact
InitializeCriticalSection
LoadLibraryA
LocalUnlock
OpenFile
RemoveDirectoryW
ScrollConsoleScreenBufferW
SearchPathA
SetConsoleTitleW
SetConsoleWindowInfo
SetProcessWorkingSetSize
TlsFree
TransmitCommChar
user32
BroadcastSystemMessageW
ChangeDisplaySettingsExA
CreateDialogIndirectParamW
CreateDialogParamA
CreateWindowExW
DdeClientTransaction
DdeFreeDataHandle
DrawFrameControl
EmptyClipboard
FreeDDElParam
GetGuiResources
GetInputState
GetMessageExtraInfo
GetUserObjectInformationW
GetUserObjectSecurity
GetWindowPlacement
HideCaret
IMPSetIMEW
MapWindowPoints
MonitorFromWindow
MsgWaitForMultipleObjects
PtInRect
ScrollDC
SetClassLongW
SetMessageExtraInfo
SetScrollInfo
SetWindowsHookW
SwitchDesktop
ToUnicode
UpdateWindow
gdi32
ChoosePixelFormat
CreateBitmap
CreateBitmapIndirect
CreateDCW
CreateDIBPatternBrush
DeleteEnhMetaFile
ExtTextOutA
GdiComment
GetBrushOrgEx
GetLogColorSpaceW
GetMiterLimit
GetNearestColor
GetTextCharsetInfo
GetTextMetricsA
OffsetViewportOrgEx
PolyPolyline
ResetDCA
SetPixelV
SetRectRgn
StartDocW
UnrealizeObject
WidenPath
Sections
.text Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 39KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ