Static task
static1
Behavioral task
behavioral1
Sample
8d1990cf9f4ed617b44ca30e74a3cf6f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8d1990cf9f4ed617b44ca30e74a3cf6f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8d1990cf9f4ed617b44ca30e74a3cf6f_JaffaCakes118
-
Size
368KB
-
MD5
8d1990cf9f4ed617b44ca30e74a3cf6f
-
SHA1
f7a83ff08509ca8ecc0fca8c29c521ce1897cc22
-
SHA256
e47681fbbf6928bc4502b8ee2d542a94b6c420abdf61c4000a5d5b92caa441ad
-
SHA512
7b45ac08cdd28f4850c808874e4cdcf1ee0e6796b09a9db0fbf2b0ad7652d116feec1acde2badf7b1db9a7efbbcc1bbc00ec1bb72f4ff90ee0e3efad59276ec0
-
SSDEEP
6144:fwsRMohrVf/DRauRHlwrFYaN5ino7241GtMqzIXPH8CV+mybPzKP3zUeXm9+r:fwsRM+rpDneFNzino7IUHybPzQjUeX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d1990cf9f4ed617b44ca30e74a3cf6f_JaffaCakes118
Files
-
8d1990cf9f4ed617b44ca30e74a3cf6f_JaffaCakes118.exe windows:4 windows x86 arch:x86
6fdc43a4bc50182b6fc4e2de7d16a171
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResumeThread
SetEvent
GetModuleHandleA
GetNumberFormatW
FindClose
GetPrivateProfileStringA
GetConsoleAliasA
GetCurrentThreadId
EnterCriticalSection
FindAtomW
LocalFree
SetLastError
GetDriveTypeW
EnumCalendarInfoA
CreateEventW
HeapCreate
GetCurrentProcessId
ReadFile
TlsGetValue
lstrlenW
user32
GetCursorInfo
GetClassInfoA
GetClientRect
CallWindowProcW
IsWindow
SetFocus
GetKeyboardType
GetKeyState
DispatchMessageA
GetSysColor
GetMenuInfo
DrawTextA
DispatchMessageA
tspkg
SpLsaModeInitialize
SpLsaModeInitialize
SpLsaModeInitialize
SpLsaModeInitialize
SpLsaModeInitialize
dsprop
CheckADsError
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 358KB - Virtual size: 357KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ