Static task
static1
Behavioral task
behavioral1
Sample
86f0cfb924abd4c1bcf7dcb6e5a5f1c7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
86f0cfb924abd4c1bcf7dcb6e5a5f1c7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
86f0cfb924abd4c1bcf7dcb6e5a5f1c7_JaffaCakes118
-
Size
10KB
-
MD5
86f0cfb924abd4c1bcf7dcb6e5a5f1c7
-
SHA1
83ef4175875be47c47b8512ccdedf226c1b8d544
-
SHA256
c3839e6565f308db9f83b2649dab9815cdef65f708c42a8a91f6dc27d72d9128
-
SHA512
f95972a7e2813aae8aced7754dd3bf27eb49dc5d2886e07ad617625a18e757f316953fce5fe7a927e18971474c7f757233c80975d0934370c01aeb467cf75ba0
-
SSDEEP
192:zL8IkvNDZsI4Y192FTIkpeXH6EUBTZJo+TTP7ptSjzwASlYF7+8fn:vDkVDsZpHJK+TL7nSv1n+8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86f0cfb924abd4c1bcf7dcb6e5a5f1c7_JaffaCakes118
Files
-
86f0cfb924abd4c1bcf7dcb6e5a5f1c7_JaffaCakes118.exe windows:4 windows x86 arch:x86
aa41c660f0b4f8d5ef237208e0ce7c4a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CallNamedPipeW
CreateNamedPipeW
EnumDateFormatsA
EnumSystemLocalesW
ExitProcess
FindFirstFileExW
GetCurrentProcessId
GetLocaleInfoW
GetPrivateProfileIntA
GetPrivateProfileStringW
GetProcessWorkingSetSize
GetTapeParameters
GetThreadContext
LocalUnlock
OpenEventW
SetComputerNameA
SetConsoleCP
SetEnvironmentVariableA
SetFileApisToOEM
SetNamedPipeHandleState
SetThreadContext
SizeofResource
UnlockFileEx
UpdateResourceA
WaitForMultipleObjectsEx
WritePrivateProfileSectionW
WriteTapemark
user32
AlignRects
CharUpperW
CheckMenuItem
CreateMDIWindowW
DdeCreateStringHandleA
DdeFreeStringHandle
DrawCaptionTempA
EmptyClipboard
EnumDisplayMonitors
EnumPropsExA
FreeDDElParam
GetClassLongW
GetNextDlgGroupItem
GetOpenClipboardWindow
GetSysColorBrush
GetUserObjectInformationW
GetUserObjectSecurity
IsDialogMessageA
LoadMenuIndirectW
LockWindowStation
MapVirtualKeyW
RegisterClassExA
SendMessageCallbackA
SendNotifyMessageA
SetKeyboardState
SetPropA
SetSysColors
ToAscii
wsprintfA
gdi32
AbortPath
AnimatePalette
CopyEnhMetaFileW
CreateColorSpaceA
CreateEnhMetaFileW
CreateFontW
CreateHalftonePalette
CreateSolidBrush
EnumFontFamiliesW
GdiPlayJournal
GetArcDirection
GetCharWidthA
GetDeviceGammaRamp
GetEnhMetaFileDescriptionW
GetRandomRgn
GetTextAlign
GetTextExtentPoint32W
OffsetClipRgn
PlayEnhMetaFile
SelectPalette
SetICMMode
SetPixelFormat
SetROP2
StrokePath
SwapBuffers
Sections
.text Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ