Static task
static1
Behavioral task
behavioral1
Sample
89742a947e9f4e964a8b7426006c0a7a_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
89742a947e9f4e964a8b7426006c0a7a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
89742a947e9f4e964a8b7426006c0a7a_JaffaCakes118
-
Size
327KB
-
MD5
89742a947e9f4e964a8b7426006c0a7a
-
SHA1
2746bc7538ec55f7a6abd9ed25f64f66e3566a4e
-
SHA256
0e9c12a4352d5fb6588dd7384b2ce4b5d5d1242fe206f6d75d67f26a1ca475b6
-
SHA512
962d6505e5afab16c0f56a65ecfdc0d4d6b14a158ead7d5e6c8dd94532f2efe066e2b2a48896b7de17246dd70266a10b48bed7f97be040b80de8c94b1655aef5
-
SSDEEP
6144:hvPKJboIJOlDXKlfCjm2vua9/uzltffEAPFzlFwRWm3kYj+0/b3flgd:hvEdoOfCiHak3EA1wD3/+0T3fq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89742a947e9f4e964a8b7426006c0a7a_JaffaCakes118
Files
-
89742a947e9f4e964a8b7426006c0a7a_JaffaCakes118.exe windows:5 windows x86 arch:x86
236175c00f92ab73ff02cbcbc5a8eb9d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMessageA
DefWindowProcA
PostQuitMessage
GetDoubleClickTime
GetQueueStatus
LoadIconA
RegisterClassA
gdi32
CreateBitmap
IntersectClipRect
ExcludeClipRect
UpdateColors
GetTextExtentPoint32A
CreateCompatibleDC
DeleteObject
TextOutA
SetTextColor
Rectangle
CreateSolidBrush
GetStockObject
CreateFontIndirectA
GetTextExtentExPointA
GetTextMetricsA
CreateFontA
RealizePalette
msacm32
acmStreamOpen
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyA
GetUserNameA
GetLengthSid
RegCreateKeyA
RegSetValueExA
RegDeleteKeyA
RegEnumKeyA
RegDeleteValueA
RegCreateKeyExA
winmm
auxSetVolume
kernel32
GetModuleHandleA
GetProcAddress
HeapCreate
HeapAlloc
GetACP
ExitProcess
FreeLibrary
GetCPInfo
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 210B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 321KB - Virtual size: 321KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 492B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ