Static task
static1
Behavioral task
behavioral1
Sample
733578983e4899fd4982eba9a0d60829_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
733578983e4899fd4982eba9a0d60829_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
733578983e4899fd4982eba9a0d60829_JaffaCakes118
-
Size
52KB
-
MD5
733578983e4899fd4982eba9a0d60829
-
SHA1
48b35f32dc972b6820ca200c9f118d17c9f83eef
-
SHA256
131ee2d33e5e45f9f894fd4df174f94228a47aee5173e2f4c7d1f3345b071838
-
SHA512
ae00b30121f7fa17ba5ab850b0bbac787b24f3a165754dfc20158bda63669ec0edbba6dd56bfddf2b2d465030778d641e22ca2ca175c19d272c91056287291ac
-
SSDEEP
768:uX/1w7Kddn7ZFpBi91Ad0hQe0fLwRieQL1vT/XpEH9bcdqHXaQA6zX6lxJw+I/j:uvd7HnGAehD0cRlQL1bIZ1S46tw+Yj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 733578983e4899fd4982eba9a0d60829_JaffaCakes118
Files
-
733578983e4899fd4982eba9a0d60829_JaffaCakes118.exe windows:4 windows x86 arch:x86
e05a1f52d09e4299a3b69e1037d17dbb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocalTime
GetFileAttributesExW
WriteFile
SetLastError
WideCharToMultiByte
FindFirstFileW
GlobalFree
WaitForSingleObject
FindNextFileW
Sleep
SetEndOfFile
GetProcAddress
GetTickCount
GetPrivateProfileStringW
SuspendThread
GetDriveTypeW
FreeResource
FindResourceExW
DuplicateHandle
LoadLibraryA
CreateWaitableTimerW
GetModuleFileNameW
SetWaitableTimer
GlobalDeleteAtom
GetFileSize
GetLogicalDrives
LockResource
CreateFileW
GetUserDefaultLangID
MultiByteToWideChar
GetVersion
LoadLibraryW
CancelWaitableTimer
user32
GetSystemMetrics
FillRect
TrackPopupMenu
RedrawWindow
DrawTextW
SetLayeredWindowAttributes
GetWindowRect
EndDialog
SetWindowTextW
OffsetRect
LoadBitmapW
SetForegroundWindow
SetDlgItemTextW
LoadStringW
LoadCursorW
GetParent
RegisterClassExW
SystemParametersInfoW
gdi32
SetBkMode
CreateRoundRectRgn
CreateDCW
CreateSolidBrush
CreateICW
CreateFontIndirectW
GetObjectW
GetDeviceCaps
BitBlt
CreateCompatibleBitmap
CreateBitmap
advapi32
LookupPrivilegeValueW
RegCloseKey
RegQueryValueExW
RegCreateKeyExW
StartServiceW
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE