Static task
static1
Behavioral task
behavioral1
Sample
8d6b6f3e9d595208df67dc5bc6742974_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8d6b6f3e9d595208df67dc5bc6742974_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8d6b6f3e9d595208df67dc5bc6742974_JaffaCakes118
-
Size
44KB
-
MD5
8d6b6f3e9d595208df67dc5bc6742974
-
SHA1
df9ca33278f2d7e7eae32b2c7c2e50c36663f9a6
-
SHA256
bb4df42f93ea8f597fcd5c4c9a08db3c243e38b0c91eab812d027da2c900caf9
-
SHA512
6aeab8d9f33122808bcfd9c5638aba18c53dd905ea1678e61305f5b25ad18188f569186441d5bbd8b13f1a0de791b78db66d61ef7d447e91e78f22c96115d3cb
-
SSDEEP
768:cWlinW/9t2y69quBf2juv9EQtOzIWZd3Ddm6rJDtjQTd5pqpX6+9OUY:lMWz2fnf99qvJrQTPspXb8n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d6b6f3e9d595208df67dc5bc6742974_JaffaCakes118
Files
-
8d6b6f3e9d595208df67dc5bc6742974_JaffaCakes118.exe windows:5 windows x86 arch:x86
40d9d9264c4149371701b7d00f1e07bc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetWindowsDirectoryA
LocalFlags
LoadLibraryW
GetProcAddress
CreateFileW
GetWindowsDirectoryW
lstrcatW
VirtualAlloc
user32
DdeSetQualityOfService
DefFrameProcW
DefMDIChildProcA
DestroyMenu
DlgDirSelectComboBoxExW
DlgDirSelectExW
DrawCaption
DrawFocusRect
DrawMenuBar
EnumDisplayDevicesW
EnumDisplaySettingsA
EnumDisplaySettingsW
EnumPropsExA
EnumWindows
FindWindowA
FindWindowExA
FindWindowW
FlashWindow
GetAncestor
GetCaretPos
GetClassNameA
GetClientRect
GetCursorInfo
GetDesktopWindow
GetKeyboardLayout
GetKeyboardState
GetMenuStringW
GetNextDlgGroupItem
GetNextDlgTabItem
GetParent
GetPriorityClipboardFormat
GetQueueStatus
GetShellWindow
GetSysColor
GetTopWindow
DdeQueryConvInfo
GetWindowModuleFileName
HiliteMenuItem
IMPQueryIMEW
InvalidateRect
IsMenu
IsWindow
LoadCursorFromFileW
LoadKeyboardLayoutW
LoadStringA
LockWorkStation
LookupIconIdFromDirectory
MapVirtualKeyW
MessageBoxA
MessageBoxIndirectA
NotifyWinEvent
OemToCharA
OpenDesktopW
OpenIcon
PaintDesktop
RealGetWindowClassA
RegisterClassA
RegisterClipboardFormatW
RegisterWindowMessageA
ReplyMessage
SendMessageW
SetClassLongW
SetCursorPos
SetDeskWallpaper
SetMenuDefaultItem
SetShellWindow
SetWinEventHook
SetWindowRgn
SetWindowsHookExA
SetWindowsHookW
ShowOwnedPopups
ShowWindow
UnhookWindowsHookEx
UnpackDDElParam
ValidateRect
VkKeyScanExW
VkKeyScanW
keybd_event
DdeNameService
DdeInitializeW
DdeFreeDataHandle
DdeCreateDataHandle
CreateCursor
CountClipboardFormats
CloseWindow
ClipCursor
CheckMenuRadioItem
CharUpperBuffA
CharPrevW
CharLowerW
BringWindowToTop
AttachThreadInput
AdjustWindowRect
GetUpdateRect
comctl32
CreatePropertySheetPageA
ord6
CreateStatusWindowW
DrawStatusText
FlatSB_GetScrollProp
ImageList_Copy
ImageList_DragEnter
ImageList_DragShowNolock
InitializeFlatSB
ImageList_SetImageCount
ImageList_Read
ImageList_LoadImageA
ImageList_EndDrag
ImageList_Duplicate
CreatePropertySheetPage
msvcrt
memcpy
Sections
.text2 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ