Static task
static1
Behavioral task
behavioral1
Sample
961209228f2aed297cf1af0a278d8ee3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
961209228f2aed297cf1af0a278d8ee3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
961209228f2aed297cf1af0a278d8ee3_JaffaCakes118
-
Size
901KB
-
MD5
961209228f2aed297cf1af0a278d8ee3
-
SHA1
b8a1f3d737cc88d573fa130a53512b2ac14d8599
-
SHA256
5dcd4f3652dcecda2d4df82f6bb6d06996964ba82c3ad938475f591efab58634
-
SHA512
c3f9aa4414b802c34d14c718e8f53438ea56a47b4316fbd1c8d8382e61a6e5d449dadd8e2b02ce0d5b64cf1d29851cd03f1c2254803b09a870d40d2921062867
-
SSDEEP
24576:HWbo4QONDlMrAKC0w1L2n49x38ICSUTIa8hI5m:HE9ND6c5w23pNUtm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 961209228f2aed297cf1af0a278d8ee3_JaffaCakes118
Files
-
961209228f2aed297cf1af0a278d8ee3_JaffaCakes118.exe windows:4 windows x86 arch:x86
1f8108b20798c03a081391c4f7b3e43a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
PostQuitMessage
SetWindowPos
IsWindow
GetCursorPos
SendMessageA
DestroyWindow
ShowWindow
EnableWindow
PeekMessageA
LoadStringA
EnableMenuItem
CreateWindowExA
FillRect
GetSystemMetrics
GetWindowRect
IsIconic
PostMessageA
GetDlgItem
ScreenToClient
MessageBoxA
SystemParametersInfoA
CallWindowProcA
SetCursor
kernel32
InterlockedIncrement
GetStdHandle
GetConsoleOutputCP
ReleaseMutex
GetFileAttributesA
WaitForSingleObject
HeapDestroy
GetFileAttributesW
DeleteCriticalSection
GetConsoleMode
GetLocaleInfoA
LocalAlloc
SetErrorMode
FreeEnvironmentStringsW
WideCharToMultiByte
WriteFile
HeapReAlloc
GetStringTypeW
FreeLibrary
LocalFree
FormatMessageW
InitializeCriticalSection
LoadResource
InterlockedDecrement
GetLastError
GetCurrentThread
GetVersion
GetModuleHandleA
GetCurrentProcessId
GetCommandLineA
GetTickCount
GetCurrentThreadId
ExitProcess
HeapAlloc
GetProcessHeap
VirtualAlloc
FindResourceA
Sleep
VirtualFree
UnmapViewOfFile
GetEnvironmentStrings
InterlockedExchange
GetModuleHandleW
CloseHandle
ReadFile
SetFilePointer
TlsFree
RaiseException
HeapSize
GetCPInfo
GetCommandLineW
SizeofResource
FileTimeToLocalFileTime
lstrlenW
LCMapStringA
GlobalFree
lstrlenA
GetSystemInfo
LCMapStringW
CreateFileA
TlsSetValue
GetFileType
CreateFileW
WaitForMultipleObjects
CreateFileMappingA
lstrcpyA
FindNextFileW
CompareStringW
GetProcAddress
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
VirtualProtect
TlsAlloc
SetEvent
LoadLibraryW
EnterCriticalSection
HeapFree
WriteConsoleW
LeaveCriticalSection
GlobalAlloc
WriteConsoleA
TerminateProcess
SetUnhandledExceptionFilter
MultiByteToWideChar
UnhandledExceptionFilter
LoadLibraryExA
GetModuleFileNameA
GetModuleFileNameW
TlsGetValue
SetLastError
FormatMessageA
Sections
.text Size: 872KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ