Static task
static1
Behavioral task
behavioral1
Sample
353b2927ffeca97c084acaf3df7ae9f6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
353b2927ffeca97c084acaf3df7ae9f6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
353b2927ffeca97c084acaf3df7ae9f6_JaffaCakes118
-
Size
191KB
-
MD5
353b2927ffeca97c084acaf3df7ae9f6
-
SHA1
dbedd97748840d804f7ea1687ac5e9fb26c7baba
-
SHA256
e1317850e0ff03dcfcc50199411eb26b46100340144781951614b7e2ac67c6b1
-
SHA512
b41f086e6f57850290d8206c98fbea6f491627b688622b8b3f2c8695c04148c40c96d606885cee65021a15403bf8e3c1da420eec762e88ef3857c779fb551c91
-
SSDEEP
3072:3nuMrBOinP4RJPREFsCkTbT995U3Eo6PoUcM4yhPUhsc5xOg++qNRJ/P2eKD:NrBOiP+6Fr+o6PoUc/yisIxOg+BMeKD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 353b2927ffeca97c084acaf3df7ae9f6_JaffaCakes118
Files
-
353b2927ffeca97c084acaf3df7ae9f6_JaffaCakes118.exe windows:4 windows x86 arch:x86
ab228ddb7fc50838767c3ff584fcc05d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
winmm
mciSendCommandA
sndPlaySoundA
shell32
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
user32
IsWindow
GetSysColor
SetCursor
ReleaseDC
GetWindowInfo
GetWindowLongA
GetDlgItem
FillRect
SetWindowPos
ReleaseCapture
SetWindowLongA
GetDC
LoadCursorA
MoveWindow
SetCapture
oleacc
LresultFromObject
CreateStdAccessibleObject
ole32
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID
kernel32
SetTapePosition
GetCurrentProcessId
ClearCommError
Sleep
GetWindowsDirectoryA
GetVersion
InterlockedExchange
EnumResourceNamesA
GetLocalTime
FatalExit
FindClose
FindFirstFileA
Sections
.text Size: 163KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lib Size: 512B - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ