Static task
static1
Behavioral task
behavioral1
Sample
7507d60a721126e87df69df9a66defdd_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7507d60a721126e87df69df9a66defdd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7507d60a721126e87df69df9a66defdd_JaffaCakes118
-
Size
92KB
-
MD5
7507d60a721126e87df69df9a66defdd
-
SHA1
3b497c35d2090e315647a5d5a6c262ba86e5ef6a
-
SHA256
4cacab9a92758f7661f73ce1cb7c2cb52b43972f573a42e9ee1c458b5e42dd5d
-
SHA512
1dc7b2f6ab441a301d7e18334c8bb657cb99ae9df328247227fdb2e115d5713876d95c2fe9572aa402db5b546c6abee04c2aa4bdb4a998a9e8fc8ad3b27fecfb
-
SSDEEP
1536:hWaXHoAAnFwUZVHa43HOaImLhOJUsQPXL8COgGIrSmw/duMHoHAt8PO:hWIAnqUv+alLhO7O5OgtK/QMHogt8PO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7507d60a721126e87df69df9a66defdd_JaffaCakes118
Files
-
7507d60a721126e87df69df9a66defdd_JaffaCakes118.exe windows:4 windows x86 arch:x86
ba7ffe3c53f5347b5796e02faa8249fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetSystemTimeAsFileTime
GetModuleHandleA
LockResource
lstrcmpiA
LoadLibraryA
GetProcAddress
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
GetCurrentProcessId
CloseHandle
GetFileSize
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
DeviceIoControl
HeapReAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
GetStringTypeW
SetFilePointer
VirtualAlloc
ReadFile
CreateFileA
FindResourceA
LoadResource
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
user32
RegisterClassExA
PostQuitMessage
EndPaint
DrawTextA
wsprintfA
GetSystemMetrics
EndDialog
MessageBoxA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
CreateWindowExA
ShowWindow
UpdateWindow
LoadStringA
DefWindowProcA
DestroyWindow
DialogBoxParamA
BeginPaint
GetClientRect
gdi32
CreateBitmap
Rectangle
TextOutA
advapi32
RegCloseKey
RegSetValueExA
ole32
CoUninitialize
CoTaskMemAlloc
CoInitialize
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ