Static task
static1
Behavioral task
behavioral1
Sample
8c1aabe2fc71b299045b51392045d846_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8c1aabe2fc71b299045b51392045d846_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8c1aabe2fc71b299045b51392045d846_JaffaCakes118
-
Size
108KB
-
MD5
8c1aabe2fc71b299045b51392045d846
-
SHA1
f55a82d06daaa030e4fc1db7bbed7b8edfcf1889
-
SHA256
96465c927158fd74618a344c5723814fd8f6b444a78a8ce4d83ba614279fb28d
-
SHA512
c52ff5217e0534df3a327dab0d7acdd008ad5ee6d9a4bfe7762cb4f9e1ff22d26a3b316b8620453acbabedeae508674ec4c68310bcf1eb1e5ecf036db6186959
-
SSDEEP
3072:nggeTfU2ZbLa3qs+fLUdSZhomJlbiB4S14jWEV:nggedZna3JhQZaYbiB9CjtV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c1aabe2fc71b299045b51392045d846_JaffaCakes118
Files
-
8c1aabe2fc71b299045b51392045d846_JaffaCakes118.exe windows:4 windows x86 arch:x86
e91197f39d50567747263badea1e1f33
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ShowCaret
SetTimer
SetDlgItemTextA
UpdateWindow
SetWindowRgn
SetWindowPos
SetClipboardData
SetCaretPos
SetCapture
SendMessageA
ReleaseCapture
RegisterClassA
PostQuitMessage
OpenClipboard
MessageBoxA
LoadCursorA
KillTimer
InvalidateRect
HideCaret
GetWindowRect
GetSystemMetrics
GetMessageA
GetDC
GetCursorPos
GetClipboardData
EndPaint
EndDialog
DragDetect
DispatchMessageA
DialogBoxParamA
DestroyWindow
DefWindowProcA
CreateWindowExA
CreateCaret
CloseClipboard
BeginPaint
ShowWindow
TranslateMessage
kernel32
lstrlenA
lstrcpyA
Sleep
SetFilePointer
ReadFile
LoadLibraryA
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
ExitProcess
CreateThread
CreateFileA
CloseHandle
gdi32
TextOutA
SetTextColor
SetBkMode
SelectObject
GetCharWidthA
DeleteObject
CreatePolygonRgn
CreateEllipticRgn
CreateDIBitmap
CreateCompatibleDC
CombineRgn
BitBlt
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ