Static task
static1
Behavioral task
behavioral1
Sample
6f3dddcc55d7834677fda2f2403717b2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6f3dddcc55d7834677fda2f2403717b2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6f3dddcc55d7834677fda2f2403717b2_JaffaCakes118
-
Size
281KB
-
MD5
6f3dddcc55d7834677fda2f2403717b2
-
SHA1
0659ca35d65f295a9a1699c4706d5281182094f0
-
SHA256
d0f01fb82bfa1cc8bb4e3e2b02115299517ff4aecc2718c409fb476b0c63375c
-
SHA512
4ea3e5f17a5043639c21370f73d37d4feaffae0ad35bdf6343057fcc397914ce98cfb791ce9b4f1e6adf16a0812934a36b10946808c1c8cfaf3a933c78a0df5f
-
SSDEEP
3072:GYmRRoxhWNlK/DCLD0xZBx0U2UntmR/UtXykvpQLwO4RTQCEvmmdzkW7xKGV:GYEuWNliW3YZBxX280uthCLwOTjvNdRt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f3dddcc55d7834677fda2f2403717b2_JaffaCakes118
Files
-
6f3dddcc55d7834677fda2f2403717b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
9801e875fd859ba48f49655a1ea329b2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc40
ord2744
ord2845
ord3945
ord2620
ord2696
ord3345
ord3346
ord3340
ord2694
ord3580
ord4096
ord3906
ord3259
ord721
ord504
ord731
ord2199
ord2299
ord1060
ord1100
ord4681
ord3859
ord4312
ord4450
ord4173
ord5360
ord3578
ord1539
ord3890
ord4657
ord2086
ord4608
ord5647
ord3837
ord4694
ord2754
ord2843
ord4296
ord2323
ord1785
ord5649
ord3268
ord4510
ord1494
ord4677
ord2140
ord1850
ord4691
ord4101
ord3907
ord3134
ord570
ord315
ord3724
ord542
ord701
ord582
ord606
ord706
ord538
ord704
ord613
ord3145
ord5725
ord5765
ord2114
ord1753
ord3710
ord2261
ord3884
ord3162
ord2255
ord3879
ord3314
ord3922
ord1540
ord4704
ord4703
ord2617
ord724
ord1014
ord1035
ord762
ord486
ord360
ord479
ord274
ord509
ord2072
ord1996
ord2007
ord2046
ord2008
ord808
ord2471
ord1423
ord2320
ord1061
ord1805
ord4142
ord760
ord5049
ord2427
ord3697
ord483
ord3656
ord2514
ord2081
ord3185
ord3110
ord3158
ord662
ord569
ord2106
ord2115
ord5121
ord1426
ord1425
ord314
ord5207
ord421
ord5676
ord478
ord5144
ord3682
ord3626
ord2293
ord5610
ord5570
ord5490
ord5492
ord3764
ord2426
ord4839
ord5031
ord836
ord834
ord4852
ord729
ord3319
ord5332
ord2515
ord3379
ord3227
ord2060
ord2001
ord2064
ord5296
ord2097
ord4627
ord965
ord3431
ord5070
ord2197
ord2234
ord3963
ord5648
ord3761
ord5053
ord3579
ord4719
ord4165
ord4713
ord2390
ord4715
ord2961
ord2909
ord3242
ord3113
ord5363
ord5569
ord1368
msvcrt40
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
__getmainargs
_initterm
__p__acmdln
exit
_controlfp
__CxxFrameHandler
rand
_setmbcp
srand
strchr
atoi
__dllonexit
_onexit
strncpy
_XcptFilter
_exit
kernel32
GetCommandLineA
FindFirstFileA
GlobalUnlock
FindClose
GlobalAlloc
Sleep
GlobalLock
GetModuleHandleA
GetStartupInfoA
GetVersion
GetLastError
GetTickCount
user32
SetClipboardData
EmptyClipboard
OpenClipboard
IsWindowVisible
LoadIconA
KillTimer
GetSystemMetrics
RedrawWindow
InvalidateRgn
GetDesktopWindow
GetWindow
EnableWindow
InvalidateRect
IsIconic
LoadBitmapA
DrawIcon
GetClientRect
SendMessageA
GetSystemMenu
AppendMenuA
GetWindowRect
SetTimer
GetForegroundWindow
CloseClipboard
gdi32
CreateDCA
StretchBlt
GetObjectA
BitBlt
CreateCompatibleDC
SetRectRgn
CombineRgn
CreateRectRgnIndirect
CreateRectRgn
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 237KB - Virtual size: 237KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ