Static task
static1
Behavioral task
behavioral1
Sample
82735214a81c3e07093238670fe2f9a4_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
82735214a81c3e07093238670fe2f9a4_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
82735214a81c3e07093238670fe2f9a4_JaffaCakes118
-
Size
577KB
-
MD5
82735214a81c3e07093238670fe2f9a4
-
SHA1
f3f78e6b4d9800b894721fcf2d198cef6f9badbd
-
SHA256
beb67e19bafc433f222084de725534a67fe2d3890e62240b68438543beb2ca66
-
SHA512
a663a600d03829e396b0d06dfc2c14e99e0074fe792d477c4cfab47a1a12ef606aca9a52568c7ea862e118d2be5f591686b6ce4425494be1e885d83b2db3eb65
-
SSDEEP
6144:T0ed8DjsofhtEgpfs54Jn4LWcuCs98Quc2LWUqEots3MFdY7oAEPh5T7cn3wv09S:TcDZfhtdHuO8Qu5VqEAs3MFC7oTCgyG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82735214a81c3e07093238670fe2f9a4_JaffaCakes118
Files
-
82735214a81c3e07093238670fe2f9a4_JaffaCakes118.exe windows:4 windows x86 arch:x86
da0e7550a8a350401812758a11a4ab10
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetUserObjectSecurity
SetWindowLongA
DefFrameProcA
GetCursorPos
UnloadKeyboardLayout
UnhookWindowsHook
GetMenuState
ShowCursor
IsCharLowerW
EnumWindowStationsA
wsprintfA
MonitorFromWindow
InsertMenuA
DefFrameProcW
BringWindowToTop
GetInputState
IsCharLowerA
DrawTextExA
OpenDesktopA
SetMessageQueue
GetDCEx
GetWindowInfo
LoadKeyboardLayoutA
HiliteMenuItem
SetCaretBlinkTime
IsMenu
CloseDesktop
keybd_event
ChangeClipboardChain
DrawTextW
OpenWindowStationA
IsDialogMessageA
kernel32
QueryDosDeviceW
GetFileInformationByHandle
FormatMessageW
WritePrivateProfileStringA
GlobalReAlloc
SetNamedPipeHandleState
GetSystemTime
FindFirstFileExW
PurgeComm
FindCloseChangeNotification
GetStringTypeExW
TryEnterCriticalSection
SetFileAttributesA
RemoveDirectoryW
SetConsoleMode
GetFileAttributesExA
CreatePipe
GlobalGetAtomNameW
FreeEnvironmentStringsA
SetCommTimeouts
GetLogicalDriveStringsA
ReadConsoleA
FlushFileBuffers
ExitProcess
LocalFileTimeToFileTime
GetSystemDefaultLangID
VirtualProtect
GlobalFindAtomA
CreateIoCompletionPort
advapi32
GetFileSecurityA
RegEnumKeyW
CryptCreateHash
ChangeServiceConfigW
RegUnLoadKeyW
RegDeleteKeyW
RegEnumValueA
CryptVerifySignatureW
Sections
.text Size: 1KB - Virtual size: 217KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 262KB - Virtual size: 262KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ