Static task
static1
Behavioral task
behavioral1
Sample
497050e5967d4b8eb0f807bf5b64725d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
497050e5967d4b8eb0f807bf5b64725d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
497050e5967d4b8eb0f807bf5b64725d_JaffaCakes118
-
Size
229KB
-
MD5
497050e5967d4b8eb0f807bf5b64725d
-
SHA1
5536aff0b75579a744675847a13967a881d6e793
-
SHA256
e0d1d5831a5da37beb789f2cf697a8a2f44a4a35b90f1acdf56e58d1c1d2d747
-
SHA512
81a4d456ec53742b0ec2cd1131dca6196962b172e047edbd0216652c0e05ccba6a6b2b3b85bbd9b827385bed4855e8e588ad2e3fa0d619be75ad9ab80b5b4001
-
SSDEEP
6144:qgzz0GOTnouvGI0yx2iG8xgLJQVeCuK+aeL4:qgzzcWHwlG8K9QVeL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 497050e5967d4b8eb0f807bf5b64725d_JaffaCakes118
Files
-
497050e5967d4b8eb0f807bf5b64725d_JaffaCakes118.exe windows:4 windows x86 arch:x86
97a7dd8ce6c793338774d3b054af21f6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
dinput
DirectInputCreateW
DirectInputCreateEx
DirectInputCreateA
kernel32
TlsGetValue
lstrlenA
lstrcpyA
lstrcatA
CloseHandle
CompareStringA
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceLanguagesW
ExitProcess
ExitThread
FreeResource
GetCommandLineA
GetDateFormatA
GetFileSize
GetStartupInfoA
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
MapViewOfFile
OpenFile
ReadFile
RtlUnwind
SetCurrentDirectoryA
SetEndOfFile
SetUnhandledExceptionFilter
TlsAlloc
TlsFree
VirtualAlloc
dsound
DirectSoundCaptureEnumerateA
DirectSoundEnumerateA
DirectSoundEnumerateW
DirectSoundCaptureCreate
shell32
ShellExecuteExA
ShellExecuteExW
ShellExecuteW
ShellExecuteA
SHBindToParent
SHGetMalloc
user32
EndPaint
LoadIconA
SetCursor
CloseWindow
BeginPaint
EndMenu
CreateMenu
olepro32
OleLoadPicture
OleCreateFontIndirect
Sections
.text Size: 84KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ