Static task
static1
Behavioral task
behavioral1
Sample
31fd28ad45a380c1046ce1e517bc2c7e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
31fd28ad45a380c1046ce1e517bc2c7e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
31fd28ad45a380c1046ce1e517bc2c7e_JaffaCakes118
-
Size
114KB
-
MD5
31fd28ad45a380c1046ce1e517bc2c7e
-
SHA1
e2a9cf3413df3adc8eb54c55f6d43fca6744909c
-
SHA256
34edba70deca8bd73069d81eb26b11b4d6ec2c49cc01622cfe6ca6caf0d7c032
-
SHA512
ee881e34af376f76b61efa29485d59d3b83c07ba0e07a93dbe02b716ce71afcc6eea489a1561fd36cf589f220e6a4bdbd756787c44d3d970672520d5a6fe4644
-
SSDEEP
1536:ywRP7KNEi52nXvnGrzWI0f33DuSiHKN+M8IYENrGqK:fRTK2PnXwzWI0f33D2FMTNrG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31fd28ad45a380c1046ce1e517bc2c7e_JaffaCakes118
Files
-
31fd28ad45a380c1046ce1e517bc2c7e_JaffaCakes118.exe windows:4 windows x86 arch:x86
2b5cfe5b87fce1e120057e2b42a61f37
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerInstallFileA
GetFileVersionInfoA
VerFindFileA
shell32
SHGetDesktopFolder
SHGetFolderPathA
SHGetDiskFreeSpaceA
SHGetFileInfoA
kernel32
GetProcAddress
ExitThread
GetDateFormatA
GetLastError
GlobalAlloc
SetEvent
GetModuleHandleA
LocalReAlloc
GetACP
SetThreadLocale
GetFileSize
VirtualAllocEx
GetCommandLineA
GetFileType
GetVersion
GetVersionExA
user32
MsgWaitForMultipleObjects
IsWindowVisible
GetActiveWindow
DestroyWindow
EndPaint
LoadCursorA
CallNextHookEx
IntersectRect
PostQuitMessage
CharNextW
GetMenuStringA
CallWindowProcA
CreateWindowExA
SendMessageA
DrawTextA
GetClipboardData
GetKeyboardState
SystemParametersInfoA
LoadKeyboardLayoutA
GetWindowRect
GetMessagePos
IsIconic
SetMenu
IsDialogMessageA
DefWindowProcA
IsChild
DefFrameProcA
MapVirtualKeyA
OffsetRect
SetWindowLongW
RegisterWindowMessageA
EnumThreadWindows
GetClassLongA
GetClassNameA
DeleteMenu
CheckMenuItem
SetWindowsHookExA
GetScrollPos
DispatchMessageA
ScreenToClient
OemToCharA
KillTimer
RegisterClipboardFormatA
SetClassLongA
GetCursor
InflateRect
FrameRect
AdjustWindowRectEx
TranslateMDISysAccel
SetCursor
GetMenuItemInfoA
GetPropA
SetCapture
DrawMenuBar
SetParent
ShowOwnedPopups
ScrollWindow
WaitMessage
GetClassInfoA
MapWindowPoints
GetSysColor
GetMenu
GetIconInfo
DestroyMenu
SetWindowPos
UnhookWindowsHookEx
GetKeyboardType
DispatchMessageW
GetMenuItemID
ClientToScreen
LoadIconA
SetActiveWindow
UnregisterClassA
DrawFrameControl
CreateIcon
GetDCEx
ShowWindow
RedrawWindow
GetCapture
GetWindowPlacement
GetSysColorBrush
BeginPaint
EqualRect
GetKeyState
CreateMenu
RegisterClassA
EnableScrollBar
EnumWindows
EnableMenuItem
GetScrollInfo
LoadBitmapA
DrawIcon
GetWindowTextA
GetFocus
IsWindowUnicode
GetLastActivePopup
GetKeyNameTextA
EnumChildWindows
IsDialogMessageW
RemovePropA
SetPropA
LoadStringA
GetWindowDC
MoveWindow
GetWindow
ShowScrollBar
SetForegroundWindow
GetKeyboardLayoutList
RemoveMenu
DrawAnimatedRects
InvalidateRect
gdi32
SetPixel
Sections
CODE Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ