Static task
static1
Behavioral task
behavioral1
Sample
a303de76f464b91e4fcde30f49fc5cfa_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a303de76f464b91e4fcde30f49fc5cfa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a303de76f464b91e4fcde30f49fc5cfa_JaffaCakes118
-
Size
186KB
-
MD5
a303de76f464b91e4fcde30f49fc5cfa
-
SHA1
d7bcf129c791028252f614c93081b650d82a26d9
-
SHA256
9733736cfd2b1a5ab0531a84713515ad649d44e61d51008459a3cc9f076de092
-
SHA512
766a513e0e915d459c5bedcdeea6f3b33d778a3c554b1e15d6ae7885d0782bb3ea6bdbdf7e0316b2e6618ab0e24dc83e02063d64635431473a3fb9d6b4edb6f4
-
SSDEEP
3072:+6KohtEXSPScGkDZDp/ugpHkrH3nGFLhgAyeH+G46xAT98OKJYyzeJjndOW:x1EXYfdD9l22LhdN46AGOlAax
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a303de76f464b91e4fcde30f49fc5cfa_JaffaCakes118
Files
-
a303de76f464b91e4fcde30f49fc5cfa_JaffaCakes118.exe windows:4 windows x86 arch:x86
244f70b039c06ae2a53cff3b216554f1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
gdi32
BitBlt
GetDeviceCaps
GetObjectA
GetStockObject
CreateSolidBrush
TextOutA
GetTextExtentPoint32A
SelectObject
SaveDC
Rectangle
DeleteDC
RestoreDC
CreateCompatibleDC
CreateRectRgn
EnumFontFamiliesExA
CreateFontIndirectA
DeleteObject
SetBkMode
SetTextColor
DeleteMetaFile
CreateCompatibleBitmap
advapi32
RegCloseKey
RegQueryValueExA
RegDeleteKeyA
RegOpenKeyExA
RegEnumKeyExA
RegOpenKeyA
RegCreateKeyExA
RegSetValueExA
winmm
mciSendCommandA
sndPlaySoundA
shell32
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
kernel32
SetTapePosition
GetVersion
ClearCommError
GetLocalTime
Sleep
FindClose
GetWindowsDirectoryA
EnumResourceNamesA
GetCurrentProcessId
FatalExit
InterlockedExchange
FindFirstFileA
oleacc
LresultFromObject
CreateStdAccessibleObject
user32
GetSysColor
FillRect
SetWindowPos
SetCursor
IsWindow
GetDlgItem
ReleaseCapture
GetWindowLongA
ReleaseDC
LoadCursorA
GetDC
MoveWindow
GetWindowInfo
SetWindowLongA
SetCapture
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
ole32
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID
Sections
.text Size: 157KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lib Size: 512B - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ