Static task
static1
Behavioral task
behavioral1
Sample
959da37e961068df74af0625d014df20_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
959da37e961068df74af0625d014df20_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
959da37e961068df74af0625d014df20_JaffaCakes118
-
Size
6.1MB
-
MD5
959da37e961068df74af0625d014df20
-
SHA1
1417a98a96f23ead2d45a7f3bb78b8c06dd85ff0
-
SHA256
ea79055b1820a30444d69e7c78aa38362b13961c36b95471cc85967e5a355ef0
-
SHA512
c3c289fb34d5f9c8ab72da616eccdc721b79a6e99424d558800d43ad6c00053db711406ba1343fac1c6141d746348d0962b24032c16d5c404a3b3d0a04633a07
-
SSDEEP
98304:AjVLDAyQ2CDsGw94cM2QrcTrc8P0Z1jVLDAyQ2CDsGw94cM2QrcTrc8P0ZP:yNDAyQriJM/r+jWtNDAyQriJM/r+jWP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 959da37e961068df74af0625d014df20_JaffaCakes118
Files
-
959da37e961068df74af0625d014df20_JaffaCakes118.exe windows:4 windows x86 arch:x86
aea214adf9d62df32129b977995fc95f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDialogBaseUnits
LoadIconA
LoadCursorA
RegisterClassA
GetUpdateRect
BeginPaint
EndPaint
PostQuitMessage
MoveWindow
ShowWindow
DefWindowProcA
InvalidateRect
SetWindowTextA
SetWindowLongA
GetMessageA
GetWindowTextA
DrawEdge
GetSysColor
DestroyWindow
CreateWindowExA
CharToOemA
OemToCharA
SendMessageA
PeekMessageA
TranslateMessage
DispatchMessageA
GetDlgItem
SetFocus
DialogBoxParamA
SendDlgItemMessageA
EndDialog
wsprintfA
MessageBoxA
GetWindowRect
GetSystemMetrics
SetWindowPos
GetClientRect
GetDC
FillRect
ReleaseDC
gdi32
CreateCompatibleDC
GetDeviceCaps
CreateFontA
DeleteDC
SelectObject
SetTextColor
SetBkColor
GetTextExtentPoint32A
TextOutA
CreateSolidBrush
DeleteObject
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA
msvcrt
_controlfp
_mbsnbcpy
rename
_mbsicmp
_mbsrchr
fclose
fread
fwrite
fopen
strcpy
_except_handler3
__set_app_type
__p__fmode
free
malloc
memset
memcpy
strcat
sprintf
memcmp
memchr
??3@YAXPAX@Z
_splitpath
strlen
strcmp
strncmp
_chdir
_chdrive
_getcwd
_getdrive
getenv
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
kernel32
GetModuleHandleA
GetModuleFileNameA
GetFileAttributesA
SetFileAttributesA
RemoveDirectoryA
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
GetStartupInfoA
SetCurrentDirectoryA
FindFirstFileA
FindNextFileA
FindClose
CreateFileA
CloseHandle
DeleteFileA
SetFilePointer
ReadFile
WriteFile
_lopen
_lread
_lcreat
_lclose
CreateDirectoryA
_llseek
_lwrite
GetCurrentDirectoryA
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ