Static task
static1
Behavioral task
behavioral1
Sample
78cea5be000e44affb98203d0db3b99c_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
78cea5be000e44affb98203d0db3b99c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
78cea5be000e44affb98203d0db3b99c_JaffaCakes118
-
Size
109KB
-
MD5
78cea5be000e44affb98203d0db3b99c
-
SHA1
7d94547859e7db41497601418e7684e764b7ba80
-
SHA256
70cbf5ccfd88db25fa48ba78246c85d73e28fe8b294887734531d00860030447
-
SHA512
e03436da67a158841b7cd1bca3b5e47cf0363270bc5f8102603f17177818b7be2747845aab019dfc3c511a36732ebd4cdaec01453a10d1a97e8c82c45cd61bb7
-
SSDEEP
3072:0UAJbLa3qs+fLUdSZhomJlbiB4S14jWCB:0UAJna3JhQZaYbiB9CjVB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78cea5be000e44affb98203d0db3b99c_JaffaCakes118
Files
-
78cea5be000e44affb98203d0db3b99c_JaffaCakes118.exe windows:4 windows x86 arch:x86
44aeb6fede908e5f59de10a241bd4084
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ShowCaret
SetTimer
UpdateWindow
SetWindowRgn
SetWindowPos
SetDlgItemTextA
SetClipboardData
SetCaretPos
SetCapture
SendMessageA
ReleaseCapture
RegisterClassA
PostQuitMessage
OpenClipboard
MessageBoxA
LoadCursorA
KillTimer
InvalidateRect
HideCaret
GetWindowRect
GetSystemMetrics
GetMessageA
GetDC
EndPaint
GetCursorPos
GetClipboardData
DispatchMessageA
EndDialog
DragDetect
DefWindowProcA
DialogBoxParamA
DestroyWindow
CloseClipboard
CreateWindowExA
CreateCaret
ShowWindow
BeginPaint
TranslateMessage
kernel32
lstrcatA
lstrlenA
lstrcpyA
Sleep
SetFilePointer
ReadFile
LoadLibraryA
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
ExitProcess
CreateThread
CreateFileA
CloseHandle
gdi32
TextOutA
SetTextColor
SelectObject
GetCharWidthA
SetBkMode
CreatePolygonRgn
CreateEllipticRgn
DeleteObject
CreateCompatibleDC
CombineRgn
CreateDIBitmap
BitBlt
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ