Static task
static1
Behavioral task
behavioral1
Sample
8a721afcf239d2e1cac3aef779acfa0b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8a721afcf239d2e1cac3aef779acfa0b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8a721afcf239d2e1cac3aef779acfa0b_JaffaCakes118
-
Size
157KB
-
MD5
8a721afcf239d2e1cac3aef779acfa0b
-
SHA1
cd8a5d78ce843cb634d6847d5f1304933a2f82ab
-
SHA256
c84bc43caa547ecfa36ff5cdf3b837b1669e46e749667caf946daff484884dbd
-
SHA512
60ebf95b0aad6c1495a8e66a89af4eab0d247f6f95c9c2d8f74bd51a8e4be0d6f1e708b41c2a89dd1bba87cb68c41fa3fb2874d155d36ca785575076883e48f7
-
SSDEEP
3072:KtOsVV8tiTFSIhYdQVjrFspjowc5MUYwP2KgPvjn4wzhFz6cIqE0F:QmAFSmeWuJs5MUn2HVFZIq9F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a721afcf239d2e1cac3aef779acfa0b_JaffaCakes118
Files
-
8a721afcf239d2e1cac3aef779acfa0b_JaffaCakes118.exe windows:4 windows x86 arch:x86
e35439d1c7c160797c0ab72b7723a067
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
GetDC
SetTimer
CharNextW
PostThreadMessageW
SendMessageW
KillTimer
GetMessageW
wsprintfW
TranslateMessage
CharUpperW
DispatchMessageW
UnregisterClassA
kernel32
lstrcpyA
lstrcpyW
MultiByteToWideChar
WideCharToMultiByte
CheckRemoteDebuggerPresent
GlobalFree
GlobalAlloc
lstrcpyA
GetTickCount
LockResource
EnumResourceNamesA
DeleteCriticalSection
GetACP
FindClose
GetLastError
OutputDebugStringW
GetCPInfo
InitializeCriticalSection
lstrcmpiW
lstrlenW
GetModuleHandleW
oleacc
LresultFromObject
CreateStdAccessibleObject
ole32
StringFromGUID2
CoUninitialize
CoInitialize
CoRegisterClassObject
CoTaskMemFree
CoTaskMemRealloc
CoCreateInstance
CoTaskMemAlloc
CoRevokeClassObject
StringFromCLSID
shlwapi
PathCombineW
PathFileExistsW
Sections
.text Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.isete Size: 1024B - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ