Static task
static1
Behavioral task
behavioral1
Sample
8499b60ce4b58b6829f47d7cd3744eb6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8499b60ce4b58b6829f47d7cd3744eb6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8499b60ce4b58b6829f47d7cd3744eb6_JaffaCakes118
-
Size
151KB
-
MD5
8499b60ce4b58b6829f47d7cd3744eb6
-
SHA1
a77d2f3f59561b4c8c118477456ef38fdfed1e33
-
SHA256
3d5508ffaeb63c052cdcb4f592be9c8d85fb458d709a20cbbfa34d1723586191
-
SHA512
f801ab5ee17eedbae58c2848d951b0714ff478810130ec7505dba8be053dcb88e734576dd846db958af5c216bcad5937aa059f4032e3b821ee66476832feab5e
-
SSDEEP
3072:ijXb2Ygj8SY/38jwsbIoTfFznOu/gVpbDjE/SpfSAUMsiSN9SX:MsKsjjbISFzdYz7xfzt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8499b60ce4b58b6829f47d7cd3744eb6_JaffaCakes118
Files
-
8499b60ce4b58b6829f47d7cd3744eb6_JaffaCakes118.exe windows:5 windows x86 arch:x86
24a14eea906fb1c452a0323027d1aed4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
SetLastError
LoadLibraryA
GetLastError
user32
wsprintfW
UpdateWindow
TranslateMessage
ShowWindow
SetWindowTextW
RegisterWindowMessageW
PeekMessageW
OpenClipboard
LoadIconW
IsZoomed
IsDialogMessageW
IsClipboardFormatAvailable
GetWindowPlacement
GetClipboardData
EnumChildWindows
EnableWindow
DispatchMessageW
DestroyWindow
CreateDialogParamW
CloseClipboard
CallNextHookEx
gdi32
BitBlt
CreateSolidBrush
DeleteDC
CreateCompatibleDC
CreateDIBitmap
TranslateCharsetInfo
TextOutW
StretchBlt
SetTextColor
SetStretchBltMode
SetBkColor
SelectObject
PatBlt
GetTextMetricsW
GetTextFaceW
GetTextExtentPointW
GetTextExtentPoint32W
GetStockObject
GetDeviceCaps
ExtTextOutW
Escape
DeleteObject
CreateFontIndirectW
advapi32
RegOpenKeyExW
Sections
.data3 Size: 512B - Virtual size: 22B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data5 Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 432B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 930B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ