Static task
static1
Behavioral task
behavioral1
Sample
68a597bf50443b9dc4c9f62ca854846c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
68a597bf50443b9dc4c9f62ca854846c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
68a597bf50443b9dc4c9f62ca854846c_JaffaCakes118
-
Size
243KB
-
MD5
68a597bf50443b9dc4c9f62ca854846c
-
SHA1
26c63120b4b191eb1317d3ab6070ae0299681a54
-
SHA256
c7e07dfa9a1b7ca361e8f34aeb7cef9ae4243d5990ae6fdd9f161f557ac10ed7
-
SHA512
952b367512e815882262dae8a3dacc2bfe813e6cde273d34b7c90b5424b242b31a4652eef3bb93a6a6d6b67ebe57f0104e916ce91312e981d3d1f66f289cfdd0
-
SSDEEP
6144:pwP/9npBWhDRdJ5CFh0eglkHGZubFCM90gAJr:p8pQhDR/MsegLZubQV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68a597bf50443b9dc4c9f62ca854846c_JaffaCakes118
Files
-
68a597bf50443b9dc4c9f62ca854846c_JaffaCakes118.exe windows:4 windows x86 arch:x86
8ed21907634c03dbf6c52b65a6a0e8d6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CloseWindow
LoadMenuA
IsWindow
DrawIconEx
EndDialog
BlockInput
CopyImage
GetDlgItem
IsMenu
GetDC
DrawTextW
DialogBoxParamW
DrawIcon
AppendMenuA
GetFocus
DialogBoxParamA
IsMenu
DrawTextW
AppendMenuW
GetWindowTextA
CopyIcon
LoadCursorA
CopyRect
DialogBoxParamA
CreateIcon
IsWindow
DrawIconEx
DialogBoxParamW
CalcMenuBar
AlignRects
GetCursor
CloseWindow
AppendMenuA
EndDialog
InsertMenuA
kernel32
GetCPInfo
FreeLibrary
DeleteFileA
GetCommandLineA
GetModuleFileNameA
GetCommandLineW
GetFileAttributesA
GetModuleHandleA
GlobalAlloc
GetStringTypeW
GetLogicalDrives
GlobalFree
lstrcpynA
GetLastError
HeapFree
GetLocalTime
GetOEMCP
Sleep
GetLastError
lstrcpyA
GetLogicalDrives
GetLocalTime
GetLogicalDrives
lstrcatA
GetLogicalDrives
GetLastError
GetLogicalDrives
GetCommandLineW
GetLogicalDrives
HeapAlloc
GetLogicalDrives
ExitProcess
GetLogicalDrives
GetCPInfo
GetLogicalDrives
WideCharToMultiByte
GetLogicalDrives
lstrcpyA
GetLogicalDrives
Sections
.tdat Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.raaaa Size: 217KB - Virtual size: 217KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.relac Size: 7KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.iaada Size: 2KB - Virtual size: 981B
IMAGE_SCN_MEM_READ