Static task
static1
Behavioral task
behavioral1
Sample
31d34eabfff3efa90f8b252a85a6b741_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
31d34eabfff3efa90f8b252a85a6b741_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
31d34eabfff3efa90f8b252a85a6b741_JaffaCakes118
-
Size
228KB
-
MD5
31d34eabfff3efa90f8b252a85a6b741
-
SHA1
9b8447c3cfc02e9f1dcf44822c72df73faf98843
-
SHA256
f4e34cdb1b9a19e29b7def5dc9e8cc9ee4f40a4fc73530064875da9daf82c46b
-
SHA512
7c1aba1c41b611e76dff487e53f9ef59cbc7ca344737a5171676a0f4fdf97186de2f867674a7509e891c6dcb353082731090c55f7ee392b381e461040d7371ea
-
SSDEEP
6144:uhPuw3mKk8UJqpKCwi2FoU8ajXuxQmt4akRnW1:uAsmKk8UJqpKCwiwoU8arq5jkl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31d34eabfff3efa90f8b252a85a6b741_JaffaCakes118
Files
-
31d34eabfff3efa90f8b252a85a6b741_JaffaCakes118.exe windows:4 windows x86 arch:x86
cf3f9a5a008e1415547a4e9bd991a240
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
BuildCommDCBAndTimeoutsW
CloseHandle
CreateMutexA
CreateNamedPipeW
DeleteFileA
EnumTimeFormatsA
ExitProcess
GetLogicalDriveStringsW
GetProcessShutdownParameters
GetStartupInfoW
GetStringTypeW
GetVersionExA
GlobalGetAtomNameA
GlobalUnWire
Heap32Next
InitializeCriticalSectionAndSpinCount
IsBadCodePtr
LoadLibraryExW
LocalAlloc
LocalSize
PurgeComm
SetDefaultCommConfigW
SetLastError
SetLocalTime
TerminateProcess
VirtualUnlock
WriteConsoleInputW
user32
AdjustWindowRectEx
CascadeChildWindows
CharLowerA
CreateDialogIndirectParamA
DdeAccessData
DrawCaptionTempA
DrawMenuBar
FillRect
FindWindowW
GetClipboardSequenceNumber
GetForegroundWindow
GetMenuState
GetMonitorInfoW
GetScrollBarInfo
GetTitleBarInfo
ImpersonateDdeClientWindow
IsWindowEnabled
MessageBoxIndirectA
RealChildWindowFromPoint
SetMenuContextHelpId
SetPropW
SetScrollPos
SetWindowWord
SetWindowsHookExA
SwitchDesktop
SwitchToThisWindow
WaitMessage
WinHelpW
gdi32
ChoosePixelFormat
ColorCorrectPalette
CreatePolygonRgn
CreateRectRgn
CreateScalableFontResourceA
DPtoLP
ExcludeClipRect
GetCharWidthFloatW
GetDeviceGammaRamp
GetFontData
GetLogColorSpaceW
GetMetaFileW
GetPath
GetTextAlign
GetTextExtentPoint32A
GetTextExtentPointA
GetWinMetaFileBits
GetWindowOrgEx
OffsetWindowOrgEx
PlayEnhMetaFile
PolyBezierTo
PolyPolyline
SetPixelFormat
SetStretchBltMode
StartDocW
SwapBuffers
Sections
.text Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 226KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ