Static task
static1
Behavioral task
behavioral1
Sample
a0a8738375248d0bd1c1f29996a3ac5f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a0a8738375248d0bd1c1f29996a3ac5f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a0a8738375248d0bd1c1f29996a3ac5f_JaffaCakes118
-
Size
27KB
-
MD5
a0a8738375248d0bd1c1f29996a3ac5f
-
SHA1
aab1bdd783e116daeca277668ae64eb34cc41eca
-
SHA256
aaba6005c2d1a06bfa8a4fd5f9225b6a06d369852519e10e74f6386ed8aa7d63
-
SHA512
a0c6ef4d286a9a420b7b3cf00b44f55ae45fe1b0844595f62fc1d6a862875c738ce243052e6b4e99d870506ececcdeea7867b41a2bb31b5e30397937ac6261d3
-
SSDEEP
384:jR1ek5MCMBcT7UTw6AlT+WymHD1dEzRxAd6oUw4wPn34:N1encT7UTyiWyAEdJoUnwv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0a8738375248d0bd1c1f29996a3ac5f_JaffaCakes118
Files
-
a0a8738375248d0bd1c1f29996a3ac5f_JaffaCakes118.exe windows:4 windows x86 arch:x86
965740d371efe5a8220b02e722cbd74d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
CloseHandle
GetModuleHandleA
GetLastError
GetTickCount
LocalAlloc
Sleep
GetStdHandle
GlobalAlloc
CreateEventA
GetFileSize
lstrlenA
GetVersionExA
lstrcpyA
GlobalFree
GetCommandLineA
lstrcatA
FreeLibrary
msvcrt
_XcptFilter
__set_app_type
_c_exit
_acmdln
wcschr
_adjust_fdiv
toupper
rand
memmove
__getmainargs
wcslen
exit
_except_handler3
__setusermatherr
__p__fmode
_controlfp
_initterm
__p__commode
_exit
gdi32
SetBkMode
GetTextExtentPoint32A
DeleteObject
GetBkColor
CreateFontIndirectA
SetROP2
GetTextMetricsA
GetObjectA
LineTo
MoveToEx
GetStockObject
CreateCompatibleDC
GetTextColor
SetPixel
CreateSolidBrush
GetPixel
PatBlt
ExtTextOutA
user32
DestroyWindow
GetClientRect
SetFocus
LoadIconA
CreateWindowExA
PostQuitMessage
ShowWindow
TranslateMessage
EndPaint
MessageBoxA
GetFocus
BeginPaint
ScreenToClient
GetWindowRect
SetWindowTextA
EndDialog
DefWindowProcA
DispatchMessageA
DialogBoxParamA
GetSysColor
GetMessageA
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ