Static task
static1
Behavioral task
behavioral1
Sample
8eeb1071f53f7eae09e0ced95841d227_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8eeb1071f53f7eae09e0ced95841d227_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8eeb1071f53f7eae09e0ced95841d227_JaffaCakes118
-
Size
229KB
-
MD5
8eeb1071f53f7eae09e0ced95841d227
-
SHA1
0d78f68a3f37ea0ce02cb2e3cb0135579c64a31f
-
SHA256
26dc377270e96d4e006634f801aec446c2b491670b7c22b6e7d24e51dd6b2ed2
-
SHA512
33c3ba2d5dce68c88590844c67236d4996a7a1b8029e81c8c5d918dd0419d3ef2583c2dd230545b2faf4de04caa319caaf181b3cb1be9c202f0b8879be882d28
-
SSDEEP
6144:6BXyEerjUt7yPRueRPnuJU/aVrdX+hCEHMp1sNfFCWgdsce:qROphPnu6/aPX+wdsNfFCXdsce
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8eeb1071f53f7eae09e0ced95841d227_JaffaCakes118
Files
-
8eeb1071f53f7eae09e0ced95841d227_JaffaCakes118.exe windows:4 windows x86 arch:x86
0a77ae9929ca3026ce7c0232f2dc686a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
GetCurrentThreadId
lstrlenA
GetProcAddress
LoadLibraryA
lstrcpyA
Sleep
ReadFile
FlushFileBuffers
SetFilePointer
RaiseException
GetStringTypeW
GetStringTypeA
GetLastError
LCMapStringA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
WriteFile
GetCurrentProcess
TerminateProcess
GlobalMemoryStatus
CloseHandle
GetVersion
VirtualFree
HeapCreate
LCMapStringW
GetLocaleInfoA
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapReAlloc
HeapAlloc
HeapSize
HeapFree
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
SetStdHandle
user32
RegisterHotKey
PeekMessageA
OpenClipboard
GetClipboardData
CloseClipboard
SetLastErrorEx
GetThreadDesktop
GetUserObjectInformationA
LoadBitmapA
GetDesktopWindow
EnumChildWindows
SetRect
DrawCaption
GetSysColor
GetWindowTextLengthA
GetWindowTextA
PostMessageA
GetDC
gdi32
CreateHatchBrush
GetDIBits
GetObjectType
DeleteDC
shlwapi
PathBuildRootA
imagehlp
MakeSureDirectoryPathExists
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 182KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ