Static task
static1
Behavioral task
behavioral1
Sample
8e3b4fe578f5ba9b3ded27fc19438d70_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8e3b4fe578f5ba9b3ded27fc19438d70_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8e3b4fe578f5ba9b3ded27fc19438d70_JaffaCakes118
-
Size
250KB
-
MD5
8e3b4fe578f5ba9b3ded27fc19438d70
-
SHA1
e62fc423d08af52c1fca5f79ad96551f3b44d700
-
SHA256
187ea415cf091611c939051636ddf44487231b38c0a05aa9e0a4e5daab9e38fc
-
SHA512
c1635f312d4a66631a00a0bda24408431caea0732e7d85af8347f0c4fb99aa0b35b2f7bc85bbd8bcbbb4a4c02ee1f71f391de36adc5ab27319ecd86bba05b9f6
-
SSDEEP
3072:KnRUGvCtfGgCYHmqZd03HwfQgIPsJ50MwzLSEZFQbUyt:KRHRYRsHwfQHY0lzLS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e3b4fe578f5ba9b3ded27fc19438d70_JaffaCakes118
Files
-
8e3b4fe578f5ba9b3ded27fc19438d70_JaffaCakes118.exe windows:4 windows x86 arch:x86
a481b81be07041fdb4d8f342490c3d72
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryA
EnumCalendarInfoA
ExitProcess
GetCPInfo
GetExitCodeProcess
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStringTypeA
IsBadCodePtr
IsDebuggerPresent
LoadLibraryA
LoadResource
SetFileAttributesA
SetThreadPriority
VirtualAlloc
VirtualFree
lstrcmpiW
user32
CreateWindowExA
GetForegroundWindow
GetWindowPlacement
gdi32
BitBlt
CreateBrushIndirect
CreateDIBitmap
GetDCOrgEx
RealizePalette
SetBkColor
SetTextColor
SetViewportExtEx
shell32
CommandLineToArgvW
DragQueryPoint
ExtractIconExW
ExtractIconW
SHGetSettings
Sections
.text Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE