Static task
static1
Behavioral task
behavioral1
Sample
60e7c9282a2c653ebb1132ba751f6309_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
60e7c9282a2c653ebb1132ba751f6309_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
60e7c9282a2c653ebb1132ba751f6309_JaffaCakes118
-
Size
35KB
-
MD5
60e7c9282a2c653ebb1132ba751f6309
-
SHA1
7881f6a8985d9146e811a8005ae1d32576dddbbb
-
SHA256
8c27bf73db3592af8b449672ae07a9004cf09ce9cf46f7782fd31010e36f8fa4
-
SHA512
a312a2d182a66bc378a28cd11854a0951cc85feb4d561f72195c94bf3b6126237783a4725d7271a2d8f41899453ea57a91cdd9df929dc9723678c07d0cebf0e4
-
SSDEEP
768:rPGMVXDdpF3RZjukLf6yyOZ1XMV3gKHZsicz2+xsbAZ9o:jGM9dj/Bfbd1XMVQscz2+xseq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60e7c9282a2c653ebb1132ba751f6309_JaffaCakes118
Files
-
60e7c9282a2c653ebb1132ba751f6309_JaffaCakes118.exe windows:4 windows x86 arch:x86
e45ab482c45ff6ed5d3c790ef3613a0d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
CancelWaitableTimer
ExitProcess
GetCurrentDirectoryA
GetFileSize
GetFileType
GetLargestConsoleWindowSize
GetLocaleInfoA
GetLocaleInfoW
GetProcessTimes
GetProfileStringA
GetShortPathNameW
GetVolumeInformationA
GlobalAddAtomA
GlobalFindAtomW
HeapAlloc
IsBadCodePtr
PeekConsoleInputW
PurgeComm
SetProcessPriorityBoost
SetThreadContext
SetVolumeLabelA
WriteConsoleOutputAttribute
WriteProfileStringW
lstrcmpi
user32
ActivateKeyboardLayout
AdjustWindowRectEx
CallMsgFilter
CharLowerBuffW
CharPrevA
CharUpperA
CloseDesktop
CreateWindowExA
DdeDisconnectList
DdeFreeDataHandle
DefMDIChildProcW
FindWindowW
GetClipboardOwner
GetMessageTime
GetParent
GetSubMenu
GetWindowContextHelpId
GetWindowTextA
InsertMenuW
IsCharAlphaNumericW
MenuItemFromPoint
PostQuitMessage
RealChildWindowFromPoint
SendMessageTimeoutA
SetClipboardData
SetDoubleClickTime
SetLastErrorEx
UserClientDllInitialize
wsprintfA
gdi32
AbortDoc
AbortPath
AddFontResourceA
ColorMatchToTarget
CopyEnhMetaFileA
CreateColorSpaceW
CreateICW
CreateScalableFontResourceW
CreateSolidBrush
DeleteObject
ExtCreateRegion
ExtTextOutW
FrameRgn
GdiPlayJournal
GetClipBox
GetEnhMetaFilePaletteEntries
GetICMProfileW
GetKerningPairsW
GetMapMode
GetTextCharset
GetWindowExtEx
PlayMetaFileRecord
PolyBezierTo
RectInRegion
ResetDCW
SetEnhMetaFileBits
SetWinMetaFileBits
Sections
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ