Static task
static1
Behavioral task
behavioral1
Sample
66e5026a2af6b961814fea3289bf1335_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
66e5026a2af6b961814fea3289bf1335_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
66e5026a2af6b961814fea3289bf1335_JaffaCakes118
-
Size
226KB
-
MD5
66e5026a2af6b961814fea3289bf1335
-
SHA1
b5e9db4bcf68ba7fd303cdfe71dc35c2dd502b6d
-
SHA256
c1412a7dda7a13248a9c35ec84aaada73d0b96bca028659ea42582d5c0173283
-
SHA512
e2d69175d07af5bdf8647ba325100c632ec87cc0d5ea439c5f00c32bef07e549f6557e9d0a99dddf0ca478dfbcdd23dc2a5f117049fdf044cc947c32eff59f8c
-
SSDEEP
6144:ZBh3rZRltsWvGnRHytAPDVsUiqmyOgnL0KPjVf:ZBh3rLltiht+3xuLzPjVf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66e5026a2af6b961814fea3289bf1335_JaffaCakes118
Files
-
66e5026a2af6b961814fea3289bf1335_JaffaCakes118.exe windows:4 windows x86 arch:x86
264aae02d267741ab224575eed66aaad
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
advapi32
GetLengthSid
RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyA
user32
CharLowerA
GetWindowLongW
RemovePropA
RedrawWindow
SetWindowLongA
SetPropA
GetForegroundWindow
IsWindow
GetClassNameA
GetWindow
SetForegroundWindow
GetMessagePos
ActivateKeyboardLayout
SetWindowTextA
DefMDIChildProcA
GetKeyboardState
EndPaint
InvalidateRect
BeginPaint
GetCursorPos
RegisterClassA
SetScrollPos
DrawIcon
GetKeyboardLayoutList
GetKeyState
GetMenuState
PeekMessageW
CloseClipboard
WindowFromPoint
DestroyMenu
DrawIconEx
IsDialogMessageA
DispatchMessageW
EnumThreadWindows
CharLowerBuffA
IsWindowUnicode
wsprintfA
GetCursor
LoadStringA
TranslateMessage
GetWindowLongA
GetSysColorBrush
GetCapture
GetWindowDC
GetDesktopWindow
CreatePopupMenu
CreateWindowExA
IsIconic
GetWindowTextA
EnableScrollBar
GetScrollInfo
CreateMenu
CharUpperBuffA
LoadIconA
SetScrollRange
TrackPopupMenu
GetParent
SetClassLongA
OffsetRect
AdjustWindowRectEx
EnableMenuItem
DrawEdge
SetParent
CallNextHookEx
ShowScrollBar
KillTimer
SetCursor
ChildWindowFromPoint
CharNextA
GetMenuStringA
GetClassLongA
GetDCEx
EnumChildWindows
DestroyWindow
DeleteMenu
MessageBeep
PostQuitMessage
SetWindowPlacement
GetClipboardData
GetKeyboardType
SetClipboardData
ShowOwnedPopups
GetWindowRect
GetScrollPos
SetRect
CharNextW
MapWindowPoints
GetMenu
UnhookWindowsHookEx
GetLastActivePopup
DestroyIcon
PeekMessageA
DrawTextA
ReleaseDC
LoadKeyboardLayoutA
GetMenuItemID
InflateRect
GetFocus
DrawMenuBar
UnregisterClassA
SetMenu
ShowWindow
SetActiveWindow
DispatchMessageA
EnableWindow
GetWindowThreadProcessId
IsWindowEnabled
CheckMenuItem
EnumWindows
LoadBitmapA
IntersectRect
LoadCursorA
GetWindowPlacement
CallWindowProcA
GetDC
MoveWindow
CharToOemA
GetKeyboardLayoutNameA
DrawAnimatedRects
SetWindowPos
OpenClipboard
IsDialogMessageW
MsgWaitForMultipleObjects
SetCapture
CreateIcon
kernel32
ExitProcess
GlobalAlloc
VirtualAlloc
GetModuleHandleA
LoadLibraryA
LoadLibraryExA
LocalAlloc
GetModuleFileNameA
Sections
CODE Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ