Static task
static1
Behavioral task
behavioral1
Sample
9760f839e72f02e3cd99d1fa855d059f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9760f839e72f02e3cd99d1fa855d059f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9760f839e72f02e3cd99d1fa855d059f_JaffaCakes118
-
Size
206KB
-
MD5
9760f839e72f02e3cd99d1fa855d059f
-
SHA1
5161a356d3c0fc2b19f4f635d5a55af9f8595fbc
-
SHA256
4af3f0de85c5b5c7a4a7b0e5c8ea348450612b26432362a78ecc81b3504052cd
-
SHA512
f9d49a50bca2a64d55e66665b4ddf7e10423a4e3aa891fd21384b5efe757af838d3d736de0d6658c0cc83c70a6d59bafb6c25ab24298784a0a96b61cf8fa3f06
-
SSDEEP
3072:1ZKoxQb+k9QvlM2UomDQEGPjRHfNtPYuD/V9P8rMz8csf2jacKUSI7Lj/PKbcVGX:3rox9QUkEq9/nP3D/jP8Pcu65GbNwy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9760f839e72f02e3cd99d1fa855d059f_JaffaCakes118
Files
-
9760f839e72f02e3cd99d1fa855d059f_JaffaCakes118.exe windows:4 windows x86 arch:x86
23f02a6162613533409b236d2e0bdf40
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
GetModuleHandleA
GetSystemDirectoryW
MulDiv
CreateMutexW
FindAtomW
EnumDateFormatsW
FindResourceA
CreateSemaphoreW
GetNamedPipeInfo
RaiseException
FreeResource
ConnectNamedPipe
GlobalGetAtomNameW
InitializeCriticalSection
WaitForSingleObject
GetPriorityClass
MoveFileA
SetErrorMode
GetNumberFormatA
GetLocalTime
GetTempPathA
lstrcat
GlobalDeleteAtom
SetLocaleInfoA
EnumCalendarInfoA
WinExec
lstrcpy
GetUserDefaultLCID
SetLocaleInfoW
IsBadStringPtrA
AddAtomW
GlobalGetAtomNameA
GetDateFormatW
GetMailslotInfo
AddAtomA
SetCurrentDirectoryA
RemoveDirectoryW
SetComputerNameW
GetVersionExA
CreateNamedPipeA
GetProcAddress
lstrcmpW
ReplaceFileW
Beep
SetCalendarInfoW
SystemTimeToFileTime
ReplaceFileA
IsBadWritePtr
user32
wvsprintfW
EmptyClipboard
GetDC
MonitorFromPoint
CreatePopupMenu
WinHelpA
GetWindowLongW
GetMenuItemID
CharUpperA
SetParent
RegisterClassExW
CreateCaret
FindWindowA
UpdateWindow
DrawIcon
GetKeyState
SetWindowPos
ShowCursor
GetClassInfoW
GetActiveWindow
RegisterWindowMessageW
OffsetRect
EnableWindow
GetForegroundWindow
GetMenuItemInfoW
DefFrameProcW
LoadMenuW
gdi32
EnumMetaFile
CreateBitmap
DeleteMetaFile
SetDIBColorTable
GetAspectRatioFilterEx
SetWindowExtEx
ExtTextOutW
SetTextColor
GetClipBox
CreateEnhMetaFileW
EndPath
CreateDIBitmap
GetTextExtentPointA
advapi32
RegFlushKey
RegOpenKeyExW
RegOpenKeyExW
RegQueryValueA
RegDeleteValueA
RegDeleteKeyA
RegQueryInfoKeyA
version
VerFindFileA
VerLanguageNameW
winmm
mciDriverNotify
midiInGetDevCapsA
timeGetTime
midiOutCachePatches
midiOutReset
Sections
.ZkOK Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.A Size: 2KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Lg Size: 3KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.c Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Bbrdqv Size: 4KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 170KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ