Static task
static1
Behavioral task
behavioral1
Sample
833501ffd9a1218baa3b7bd1f047ed87_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
833501ffd9a1218baa3b7bd1f047ed87_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
833501ffd9a1218baa3b7bd1f047ed87_JaffaCakes118
-
Size
208KB
-
MD5
833501ffd9a1218baa3b7bd1f047ed87
-
SHA1
f9ab1d2c769b4e7233d5f2354014be4f2eb822fc
-
SHA256
d25d891582352ade3b71716d7d22efa305e213351b06bf0e1cc407289dcda18b
-
SHA512
c8e671326c3bdc93fb900168335a641530967db12440c558e86bbb0338caad7f709d81bc4c333821ad9363fef35ce276dfb257310ddc582e7f31ae83696c8acf
-
SSDEEP
6144:WeEKe+6gpRG/A7sp/G+k0OocfTFf90D1a8J/:NMOsp/G+jmTFV0Ba8J/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 833501ffd9a1218baa3b7bd1f047ed87_JaffaCakes118
Files
-
833501ffd9a1218baa3b7bd1f047ed87_JaffaCakes118.exe windows:5 windows x86 arch:x86
5e453976134279ba3c896173ef1d19dc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateWindowExA
WindowFromPoint
IsWindowVisible
BeginPaint
EndPaint
SetWindowTextA
LoadIconA
LoadCursorA
gdi32
GetTextColor
FrameRgn
CreateFontIndirectA
DeleteObject
SetRectRgn
kernel32
GetTickCount
GetPrivateProfileStringA
GetThreadLocale
GetLastError
HeapDestroy
RtlUnwind
SetFileAttributesA
GetStartupInfoA
GetProcAddress
FreeLibrary
DeleteCriticalSection
LeaveCriticalSection
LoadLibraryA
EnterCriticalSection
InitializeCriticalSection
GetCurrentProcess
GetStdHandle
HeapAlloc
HeapCreate
GetEnvironmentStrings
Sections
.text Size: 187KB - Virtual size: 187KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ