Static task
static1
Behavioral task
behavioral1
Sample
8e9efe8621105153482bbe600b914b83_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8e9efe8621105153482bbe600b914b83_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8e9efe8621105153482bbe600b914b83_JaffaCakes118
-
Size
101KB
-
MD5
8e9efe8621105153482bbe600b914b83
-
SHA1
79f0ddc202675b94d06574a2454def05c75b231a
-
SHA256
648919fa21bff94d09573a5879d500fa9eb0d227f683dd78f09c079ce749c4b9
-
SHA512
688d00c8e202543e12562e1a6627f4508022cd5837dc8b64bc3cb84e42c6a69ba0d187b706b58956891ccb0b992c1382dc97a6ca445694392f29712baa1fbfa3
-
SSDEEP
1536:Pg4znPO5eT9GRjJc83P0z20hYUmk1zhtNS52agRs8kefPVySNJWHcU7YUA0k:I4zn25nhJ7P+20hl1zB+2fs8k8/NJafy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e9efe8621105153482bbe600b914b83_JaffaCakes118
Files
-
8e9efe8621105153482bbe600b914b83_JaffaCakes118.exe windows:4 windows x86 arch:x86
e26cda99927e3d210a26b1e19e5609b6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawTextA
LoadCursorA
CopyRect
CreateIcon
CopyIcon
GetDlgItem
GetCursor
CopyImage
DialogBoxParamW
EndDialog
LoadMenuA
GetDC
GetWindowTextA
DialogBoxParamA
GetFocus
IsWindow
DrawIconEx
InsertMenuA
DrawTextW
GetMenu
CloseWindow
kernel32
SetHandleCount
LCMapStringA
lstrcpyA
GetStringTypeW
GetVersion
LCMapStringW
GetStartupInfoA
CreateFileA
GetFileType
GetACP
GetCPInfo
SetFilePointer
lstrcpynW
lstrcatA
GetStringTypeA
GetStdHandle
WriteFile
GetOEMCP
GetCurrentProcess
lstrcpynA
TerminateProcess
comctl32
ImageList_Create
MenuHelp
CreateToolbar
ImageList_DrawEx
ImageList_GetIcon
InitCommonControls
ImageList_AddIcon
CreateUpDownControl
ImageList_Add
DrawStatusTextW
ImageList_LoadImageA
ImageList_Copy
advapi32
RegEnumKeyA
RegEnumValueW
RegQueryValueExW
RegDeleteValueW
RegCreateKeyExW
RegCreateKeyW
RegQueryValueW
RegOpenKeyW
RegSetValueA
RegOpenKeyExW
RegCreateKeyExA
RegDeleteValueA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 94KB - Virtual size: 18.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ