Static task
static1
Behavioral task
behavioral1
Sample
3124dac6b312c64ebdeafa993a87f9fc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3124dac6b312c64ebdeafa993a87f9fc_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3124dac6b312c64ebdeafa993a87f9fc_JaffaCakes118
-
Size
244KB
-
MD5
3124dac6b312c64ebdeafa993a87f9fc
-
SHA1
f06ea64b5c5e708056ce4933dd4f7c1c589ac9d7
-
SHA256
2778a7b8b40da5e4d447fc55c546168034d8531beb72683a36874afb3e633094
-
SHA512
602a4a0c0597ca987a984f12f0926ad7177159e0f603f1dbdebf7bb5488f790bbdab9d8e5fcbc8475b7b64168d8e3e35460ba4e65dacb1c9c61ad5ab6b42ad74
-
SSDEEP
6144:zOUj+bBvkSHQeZdz+654mEgvf9pd7ngyqhY:zOUj+bBDHLZdK6amEgNVcY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3124dac6b312c64ebdeafa993a87f9fc_JaffaCakes118
Files
-
3124dac6b312c64ebdeafa993a87f9fc_JaffaCakes118.exe windows:4 windows x86 arch:x86
5eaf29cc37afb1fa36093dd85e68f46c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LocalAlloc
lstrcmpiA
SetFilePointer
RaiseException
ExitProcess
lstrcatA
lstrlenA
SizeofResource
IsBadReadPtr
ExitThread
lstrcpyA
MulDiv
GetVersionExA
LocalReAlloc
GetModuleHandleA
VirtualAlloc
IsBadHugeReadPtr
WriteFile
LoadLibraryExA
GetCommandLineA
GetProcAddress
SetHandleCount
VirtualFree
LoadLibraryA
SetLastError
VirtualQuery
WideCharToMultiByte
MoveFileA
SetThreadLocale
GetCommandLineW
SetErrorMode
lstrcmpA
LocalFree
gdi32
CreateDIBitmap
CopyEnhMetaFileA
SaveDC
CreateBitmap
GetDIBColorTable
SetPixel
BitBlt
user32
SendMessageA
SetPropA
GetClientRect
CharLowerBuffA
WindowFromPoint
RemoveMenu
FrameRect
CreatePopupMenu
MoveWindow
GetFocus
GetMenuItemCount
GetScrollRange
CharNextA
SetForegroundWindow
InvalidateRect
GetClassNameA
InsertMenuA
CharUpperBuffA
SetWindowsHookExA
GetMenuItemInfoA
TranslateMDISysAccel
ReleaseCapture
CharLowerA
GetScrollInfo
GetMenuStringA
GetMenuState
GetForegroundWindow
IsChild
EnumWindows
DefWindowProcA
DrawTextA
GetMessagePos
GetWindowLongA
GetClipboardData
GetCursor
DrawMenuBar
DrawIcon
DrawFrameControl
PostMessageA
IsWindowUnicode
DrawEdge
GetIconInfo
ShowWindow
GetKeyboardLayout
SetMenu
SetWindowTextA
IntersectRect
SetWindowLongA
GetWindowRect
ScrollWindow
IsDialogMessageW
SetScrollInfo
GetWindowDC
GetKeyboardState
GetWindow
GetMenuItemID
IsIconic
EnumChildWindows
wsprintfA
GetKeyState
IsWindowVisible
IsRectEmpty
IsZoomed
GetKeyboardType
DestroyWindow
MapWindowPoints
GetSysColor
GetSystemMetrics
GetDesktopWindow
DrawIconEx
EnableMenuItem
EndPaint
GetParent
DestroyIcon
OffsetRect
GetTopWindow
GetMenu
TranslateMessage
RemovePropA
IsWindowEnabled
CreateMenu
EnableScrollBar
PeekMessageA
RegisterClipboardFormatA
DeleteMenu
ReleaseDC
GetScrollPos
GetWindowThreadProcessId
GetWindowLongW
GetSysColorBrush
EqualRect
Sections
CODE Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 157KB - Virtual size: 157KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES72 Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES77 Size: 1024B - Virtual size: 533B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES43 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES99 Size: 512B - Virtual size: 119B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES16 Size: 512B - Virtual size: 109B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES23 Size: 512B - Virtual size: 139B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES11 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES89 Size: 1024B - Virtual size: 791B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ