Static task
static1
Behavioral task
behavioral1
Sample
8cac91155d69d9560be299d97e9c990e_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8cac91155d69d9560be299d97e9c990e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8cac91155d69d9560be299d97e9c990e_JaffaCakes118
-
Size
61KB
-
MD5
8cac91155d69d9560be299d97e9c990e
-
SHA1
a1a18d6f02ffb8e7d5da6a6dc7150ada893eb733
-
SHA256
08bf08bd54b6c831babdeaa88300de8bee65c9f42eea25ac1d0081d21eafa75b
-
SHA512
0cefcb5f55d06be1c35cca8939cf212af3fb1d42f27d6366d74b8649a636222dad584cc81dc65eb4cd9d0cc22c423e4a308fa4c5db789537f01081e5d221d08e
-
SSDEEP
1536:ncVlcPbZIljhNOxr+Omrzi5oK3thj4bXF/gBUeg55q59:UWujPOxZOu5Htatgi4/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cac91155d69d9560be299d97e9c990e_JaffaCakes118
Files
-
8cac91155d69d9560be299d97e9c990e_JaffaCakes118.exe windows:4 windows x86 arch:x86
872b2a27470bbc53540d8a675e42c7f8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
dinput
DirectInputCreateW
DirectInputCreateEx
kernel32
MapViewOfFile
lstrcmpiA
lstrcmpA
CloseHandle
CompareStringA
EnterCriticalSection
ExitProcess
GetDateFormatA
GetSystemTime
LeaveCriticalSection
OpenFileMappingA
ole32
OleUninitialize
OleInitialize
WriteClassStm
OleGetClipboard
CoUninitialize
OleIsCurrentClipboard
CreateBindCtx
CLSIDFromProgID
CoCreateInstance
CoGetClassObject
CoInitialize
ProgIDFromCLSID
CoLockObjectExternal
dsound
DirectSoundCaptureCreate8
DirectSoundFullDuplexCreate
user32
GetDC
EqualRect
CreateMDIWindowA
CreateDialogParamA
OffsetRect
shell32
SHFileOperationA
SHGetDesktopFolder
SHGetFileInfoA
SHGetMalloc
SHGetPathFromIDListA
ShellExecuteW
Shell_NotifyIconA
msvfw32
DrawDibProfileDisplay
DrawDibTime
ord2
GetSaveFileNamePreviewW
DrawDibClose
Sections
.text Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ