Static task
static1
Behavioral task
behavioral1
Sample
7590218bfe68d5959aeda7be44a610cf_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7590218bfe68d5959aeda7be44a610cf_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7590218bfe68d5959aeda7be44a610cf_JaffaCakes118
-
Size
567KB
-
MD5
7590218bfe68d5959aeda7be44a610cf
-
SHA1
bb0dbe77302a9b06f0e00e35e7da9ef041c41366
-
SHA256
7803625b0b7399ca52c5531092a15e9dd94a4561e4d69fd56a92e309e7df2ea8
-
SHA512
81618312f71454e0e39b32b6088d869e83da750cfff77b1c332a3783cc63da38ad543bbcb0bc1ffef70240140a4c9457e95d31831fa759d207f593822b65a494
-
SSDEEP
12288:TcDZfhtdHuO8QuzbguFL9Zo2YrWTuKxiaGUKZE:TcDZfhtdHuODwkuFLjo2YiTViZU2E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7590218bfe68d5959aeda7be44a610cf_JaffaCakes118
Files
-
7590218bfe68d5959aeda7be44a610cf_JaffaCakes118.exe windows:4 windows x86 arch:x86
da0e7550a8a350401812758a11a4ab10
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetUserObjectSecurity
SetWindowLongA
DefFrameProcA
GetCursorPos
UnloadKeyboardLayout
UnhookWindowsHook
GetMenuState
ShowCursor
IsCharLowerW
EnumWindowStationsA
wsprintfA
MonitorFromWindow
InsertMenuA
DefFrameProcW
BringWindowToTop
GetInputState
IsCharLowerA
DrawTextExA
OpenDesktopA
SetMessageQueue
GetDCEx
GetWindowInfo
LoadKeyboardLayoutA
HiliteMenuItem
SetCaretBlinkTime
IsMenu
CloseDesktop
keybd_event
ChangeClipboardChain
DrawTextW
OpenWindowStationA
IsDialogMessageA
kernel32
QueryDosDeviceW
GetFileInformationByHandle
FormatMessageW
WritePrivateProfileStringA
GlobalReAlloc
SetNamedPipeHandleState
GetSystemTime
FindFirstFileExW
PurgeComm
FindCloseChangeNotification
GetStringTypeExW
TryEnterCriticalSection
SetFileAttributesA
RemoveDirectoryW
SetConsoleMode
GetFileAttributesExA
CreatePipe
GlobalGetAtomNameW
FreeEnvironmentStringsA
SetCommTimeouts
GetLogicalDriveStringsA
ReadConsoleA
FlushFileBuffers
ExitProcess
LocalFileTimeToFileTime
GetSystemDefaultLangID
VirtualProtect
GlobalFindAtomA
CreateIoCompletionPort
advapi32
GetFileSecurityA
RegEnumKeyW
CryptCreateHash
ChangeServiceConfigW
RegUnLoadKeyW
RegDeleteKeyW
RegEnumValueA
CryptVerifySignatureW
Sections
.text Size: 1KB - Virtual size: 217KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 262KB - Virtual size: 262KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ