Static task
static1
Behavioral task
behavioral1
Sample
6435b8ad62feda73e7ee70f5ccba1822_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6435b8ad62feda73e7ee70f5ccba1822_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6435b8ad62feda73e7ee70f5ccba1822_JaffaCakes118
-
Size
50KB
-
MD5
6435b8ad62feda73e7ee70f5ccba1822
-
SHA1
9e3a71fca6c0a450494bdae296161a178f5050c9
-
SHA256
7706f419ac5561d0447a5155016b1344a4cb9aad6734fb6b84405e64272cdbc2
-
SHA512
073d53f8d66044030bc9ef061f980bcbb857906f419befc55ad26eb2a0993a1ffcd717d8f52dda1b523b38f6a4947d798f443cd09f3c488d13437415a58fb6e9
-
SSDEEP
384:oeP1UAoUZCywRpE5/sd5xqFfG5aaxpAzu3lFXetifkTGUFuhhQX/aEpMovBvqq42:o0ARpmMau3mt4kTGyHaEpMYJqStoizP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6435b8ad62feda73e7ee70f5ccba1822_JaffaCakes118
Files
-
6435b8ad62feda73e7ee70f5ccba1822_JaffaCakes118.exe windows:5 windows x86 arch:x86
7c1fd1a52e59b7d6ef7bf55e7e7bc123
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
LoadLibraryW
GetWindowsDirectoryA
lstrcatA
CreateFileA
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
InvalidateRect
IsClipboardFormatAvailable
IsDialogMessageW
IsZoomed
LoadAcceleratorsW
LoadIconW
OpenClipboard
PeekMessageW
GetWindowPlacement
PostQuitMessage
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
ScreenToClient
SetCapture
SetCursor
SetCursorPos
SetWindowTextW
SetWindowsHookExW
ShowCursor
ShowWindow
TranslateMDISysAccel
TranslateMessage
UpdateWindow
wsprintfW
GetSystemMetrics
GetSystemMenu
GetSysColor
GetSubMenu
GetMessageW
GetMenu
GetDlgItemInt
GetClipboardData
GetClientRect
FillRect
EnumChildWindows
EndPaint
EnableWindow
DrawMenuBar
DispatchMessageW
DestroyWindow
DefMDIChildProcW
DefFrameProcW
CreateDialogParamW
CloseClipboard
CheckMenuItem
CallNextHookEx
BeginPaint
PostMessageW
gdi32
CreateCompatibleDC
CreateDIBitmap
CreateFontIndirectW
CreateSolidBrush
DeleteDC
DeleteObject
Escape
ExtTextOutW
TranslateCharsetInfo
TextOutW
StretchBlt
SetTextColor
SetStretchBltMode
SetBkColor
SelectObject
PatBlt
GetTextMetricsW
GetTextFaceW
GetTextExtentPointW
GetTextExtentPoint32W
GetStockObject
GetDeviceCaps
BitBlt
Sections
.text Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpo1 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 732B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ