Static task
static1
Behavioral task
behavioral1
Sample
8abbb98f10201780b5670c6cb982264c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8abbb98f10201780b5670c6cb982264c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8abbb98f10201780b5670c6cb982264c_JaffaCakes118
-
Size
42KB
-
MD5
8abbb98f10201780b5670c6cb982264c
-
SHA1
1388b96c50dc967762700e8440a59a1d58b92610
-
SHA256
f5f69e5cfa344d6bfb7ac568dbbb1fa4bfd0849e3e65ac198efdaba3a8c1d245
-
SHA512
e0c4af4352f4683304c94a85f6f4a46ce73d20235631bdd446514a82dd80d254cc9407cacab69d0cf62ed25edbf0f4ef75a449e50a42334193e4527f07de3634
-
SSDEEP
768:1BIt2HZRvpLAkWwNfpZWpSsL5+6LbZLvkjCQdwdR7GeToVp21uH4dQ:b5HZRB8kWwNRg+GxyCQdwdQVk1g4+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8abbb98f10201780b5670c6cb982264c_JaffaCakes118
Files
-
8abbb98f10201780b5670c6cb982264c_JaffaCakes118.exe windows:4 windows x86 arch:x86
46fd0332a852b253b6c2aaabff71d958
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EscapeCommFunction
ExitProcess
GetNumberFormatW
GetProcessVersion
GetStringTypeA
GetSystemDefaultLangID
GetSystemTimeAsFileTime
GetVersionExW
GlobalUnWire
GlobalUnfix
Heap32ListNext
InterlockedExchange
MapViewOfFile
ResetWriteWatch
SetCalendarInfoA
SetProcessPriorityBoost
SetTapePosition
SleepEx
WideCharToMultiByte
lstrcmpW
user32
ChangeDisplaySettingsA
CharLowerBuffW
CloseWindow
CopyImage
CopyRect
CreateIconIndirect
DdeUninitialize
EndMenu
EnumPropsW
FreeDDElParam
GetDC
GetDialogBaseUnits
GetGUIThreadInfo
GetKeyboardType
GetProcessDefaultLayout
IsIconic
LoadCursorW
LoadImageW
MapVirtualKeyA
SetCaretPos
TranslateAcceleratorW
UnhookWindowsHook
gdi32
AnimatePalette
BeginPath
CreateEnhMetaFileW
CreateFontW
CreateICA
CreateRectRgn
DeleteColorSpace
DeleteMetaFile
EnumFontFamiliesExA
GetBkColor
GetCharWidth32A
GetClipRgn
GetEnhMetaFileA
GetFontLanguageInfo
GetTextExtentExPointA
GetTextExtentExPointW
GetWindowExtEx
PolyBezier
PolyPolyline
PtInRegion
SetMapperFlags
SetWindowExtEx
TextOutW
Sections
.text Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ