Static task
static1
Behavioral task
behavioral1
Sample
407adbdeb89f099b8963dd2f7df73f5d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
407adbdeb89f099b8963dd2f7df73f5d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
407adbdeb89f099b8963dd2f7df73f5d_JaffaCakes118
-
Size
114KB
-
MD5
407adbdeb89f099b8963dd2f7df73f5d
-
SHA1
c0e53cb78cb56b10ab72eaec0360abb74293163c
-
SHA256
231a5610ee9ff16761a88ca2a00fc63ce564f33e2a161ec89fb86cdace17a611
-
SHA512
c90bd1cda8ad8ffb5b5bbb7d17e0af6e39571c68313ecad3e8ed992650a1a36423ee0a661dae82123a0e71f17cbeb82c3e274410b77bec3a6cfcbd8b8209393d
-
SSDEEP
768:IDe7Snq3I+/zrbVRsKWNUc3zYo8K+wzyQgtJji7/06BXq+ujhI68M1HOYbV076ix:dPI+/fb8YoKOgbW7/nXqfCFUuYbmXx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 407adbdeb89f099b8963dd2f7df73f5d_JaffaCakes118
Files
-
407adbdeb89f099b8963dd2f7df73f5d_JaffaCakes118.exe windows:4 windows x86 arch:x86
6ef7542651f5b71d2beac75f567c9898
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetDateFormatW
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetTimeFormatW
comdlg32
ChooseFontW
gdi32
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateEllipticRgn
CreateFontIndirectW
CreatePen
DeleteDC
DeleteObject
Ellipse
GetStockObject
GetTextExtentPointW
LineTo
MoveToEx
OffsetRgn
OffsetWindowOrgEx
SelectObject
SetBkColor
SetBkMode
SetTextColor
SetViewportOrgEx
TextOutW
shell32
ShellAboutW
ucrtbase
__p___argc
__p___argv
_configure_narrow_argv
_get_initial_narrow_environment
_initialize_narrow_environment
_set_app_type
cos
exit
sin
user32
BeginPaint
CheckMenuItem
CheckMenuRadioItem
CreateWindowExW
DefWindowProcW
DispatchMessageW
EnableMenuItem
EndPaint
FillRect
GetDC
GetMessageW
GetSubMenu
GetSysColor
GetSysColorBrush
GetWindowLongW
GetWindowRect
InvalidateRect
KillTimer
LoadCursorW
LoadIconW
LoadMenuW
LoadStringW
MapWindowPoints
MessageBoxW
PostQuitMessage
RegisterClassW
ReleaseDC
SetMenu
SetTimer
SetWindowLongW
SetWindowPos
SetWindowRgn
SetWindowTextW
ShowWindow
TranslateMessage
UpdateWindow
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/4 Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 208B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/14 Size: 4KB - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/29 Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/41 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/55 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/67 Size: 4KB - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/78 Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ