Static task
static1
Behavioral task
behavioral1
Sample
87f13c785ce48e9b485b34cd1fa899ee_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
87f13c785ce48e9b485b34cd1fa899ee_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
87f13c785ce48e9b485b34cd1fa899ee_JaffaCakes118
-
Size
374KB
-
MD5
87f13c785ce48e9b485b34cd1fa899ee
-
SHA1
6a656919820080f32580a4405bbe4a7c9637edcc
-
SHA256
e6bee13050fbe5d4c3d94acc30d83c4325d1abf9630beeabfa4619cccc0a0f9f
-
SHA512
8b833131d8121682770144b92a8df8a3f2d8d3885bd2cbb957779c9407ac1553820f55eb616a6c3e884a72f57fb558336efb9c601b595bceafb3152ac54c9f45
-
SSDEEP
6144:HMgSEtGNh+DVOrWswVu5gWHs4tKHi8jDHzJFQI2NjFks:TjGNMDcrnsDWMsADHzDgr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87f13c785ce48e9b485b34cd1fa899ee_JaffaCakes118
Files
-
87f13c785ce48e9b485b34cd1fa899ee_JaffaCakes118.exe windows:4 windows x86 arch:x86
1b5154a44b8e12c40137ebcc60d695cf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
RestoreDC
SaveDC
CreatePen
Rectangle
SetMapMode
SetBkMode
Ellipse
MoveToEx
ole32
CoFileTimeNow
CoCreateInstance
CoAddRefServerProcess
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoFileTimeToDosDateTime
CoInitialize
OleCreateLinkFromDataEx
OleCreateLinkEx
kernel32
CreateFileMappingA
GetModuleFileNameA
GetPriorityClass
DeviceIoControl
GetVersion
MulDiv
ExitProcess
OutputDebugStringA
GetDateFormatA
FindClose
GetExitCodeThread
GetLastError
FlushFileBuffers
CreateThread
VirtualFree
user32
GetMenuItemID
EndPaint
LoadStringA
ReleaseDC
DefFrameProcA
GetDoubleClickTime
SetTimer
ModifyMenuA
msvcrt
atoi
_except_handler3
strlen
iswctype
qsort
_wcsnicmp
_snprintf
bsearch
__p__fmode
advapi32
StartServiceA
SetTokenInformation
InitializeAcl
QueryServiceObjectSecurity
RegEnumValueA
FreeSid
LookupPrivilegeNameA
Sections
.text Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ