Static task
static1
Behavioral task
behavioral1
Sample
8df74f63820f21ac51f3a7d95c82e2af_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8df74f63820f21ac51f3a7d95c82e2af_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8df74f63820f21ac51f3a7d95c82e2af_JaffaCakes118
-
Size
17KB
-
MD5
8df74f63820f21ac51f3a7d95c82e2af
-
SHA1
3c16ca248d94cacafc029ba3acd49ed16ef84c77
-
SHA256
27597a59c38be2ca5dbb6d88420270da0114cb619b32006b29a7119704b0c981
-
SHA512
d9eb3f0c862c354cb08cf653b440d2dca2e12150f2740a0ed6c70db152d99b656ad60c78ab1c0db6c381d4ac26864adcb52c6e7ed180e9bb4937c0a99b64371e
-
SSDEEP
192:vIh7UhHGPKbE1s4lQHCdIPDVPTmKcDZYNZ40X8o9dyZVS:M7XKbE1siQrPDUKif0X8uonS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8df74f63820f21ac51f3a7d95c82e2af_JaffaCakes118
Files
-
8df74f63820f21ac51f3a7d95c82e2af_JaffaCakes118.exe windows:4 windows x86 arch:x86
729b1d00895bfbfbb6e5ba1821fb5110
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ClearCommBreak
CreateFiber
CreateMutexW
CreateSemaphoreW
CreateToolhelp32Snapshot
DeleteFiber
DeleteFileW
ExitProcess
FindAtomA
FindFirstChangeNotificationW
GetConsoleOutputCP
GetProcessTimes
GetShortPathNameA
GetTapeParameters
GetThreadContext
HeapUnlock
HeapValidate
LeaveCriticalSection
OpenSemaphoreA
QueryDosDeviceA
QueryDosDeviceW
ResetEvent
SetWaitableTimer
WriteProfileSectionW
_llseek
user32
BroadcastSystemMessageW
ClipCursor
CloseDesktop
DestroyCaret
DestroyMenu
DrawIcon
DrawTextA
DrawTextW
EnumDisplayDevicesA
EnumPropsW
FreeDDElParam
GetAsyncKeyState
GetClipboardData
GetKeyboardLayout
GetParent
GetSysColor
GetWindowLongW
GetWindowModuleFileNameA
GetWindowTextLengthW
IsDialogMessage
LoadBitmapA
LoadCursorFromFileW
PostQuitMessage
SendMessageW
SetMenuInfo
SetSystemCursor
UnloadKeyboardLayout
gdi32
ColorMatchToTarget
CreateBitmap
CreateBrushIndirect
CreateICW
DeleteDC
DeleteEnhMetaFile
EnumFontFamiliesExA
FlattenPath
GdiGetBatchLimit
GetAspectRatioFilterEx
GetCharABCWidthsFloatW
GetCharWidth32W
GetKerningPairs
GetTextCharset
PlayEnhMetaFile
PolyBezier
PolyDraw
PolylineTo
ScaleWindowExtEx
SelectClipRgn
SwapBuffers
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdata Size: 4KB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE