Static task
static1
Behavioral task
behavioral1
Sample
a880729b4616e8e53efdf1d34fd8c970_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a880729b4616e8e53efdf1d34fd8c970_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a880729b4616e8e53efdf1d34fd8c970_JaffaCakes118
-
Size
637KB
-
MD5
a880729b4616e8e53efdf1d34fd8c970
-
SHA1
3cbd81c98254274c58125590ea5736f24512710f
-
SHA256
d22b5e7b9222aaefa1cadf23d4d1e4b9e8971dd1eca665e9a938e7d37037e30f
-
SHA512
a493371fce4a2fe98e0368e625d577a7fcaaf5f2dfef26e5d672481e5c85dc5e21ea85d5f1d12d02310af0f8f599bb3ff648c22256b3c55f80085e03107ddeb7
-
SSDEEP
12288:+H5NiS/iE/41q5xCpKaQpSMf+O3SkHam1H0GFe/Bk+De5lqX96igYOCWyGBbwqoS:+Hpao554pKaiSMf7CWam1Hd+Bk5SXIiy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a880729b4616e8e53efdf1d34fd8c970_JaffaCakes118
Files
-
a880729b4616e8e53efdf1d34fd8c970_JaffaCakes118.exe windows:4 windows x86 arch:x86
22928be849eb93a0f2c3b031a4d2fdf0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
VirtualAllocEx
GetProcessTimes
GetHandleInformation
CreateWaitableTimerA
FindNextChangeNotification
LocalSize
GetThreadPriority
EraseTape
GetAtomNameA
FatalAppExitA
GetProfileStringA
SystemTimeToFileTime
SwitchToFiber
ExitProcess
GetThreadContext
EnumCalendarInfoW
GetStringTypeExW
comdlg32
GetOpenFileNameA
GetSaveFileNameA
user32
TrackPopupMenuEx
MessageBeep
SendInput
GetMenuItemCount
SendMessageCallbackW
InvalidateRect
GetClassInfoExA
GetUserObjectInformationA
TrackMouseEvent
DrawCaption
GetUpdateRect
SetMenuItemInfoW
OpenWindowStationW
EnumDesktopWindows
RegisterHotKey
GetClassInfoExW
BroadcastSystemMessageW
SetRect
RedrawWindow
GetClassLongA
PostMessageA
gdi32
EnumFontsA
GetRgnBox
IntersectClipRect
CreateDIBSection
GetWindowExtEx
Rectangle
msvcrt
longjmp
_wstrdate
_wsplitpath
wcsncat
iswascii
wcstombs
_setmode
_open_osfhandle
abort
_strcmpi
_wcslwr
swprintf
_wputenv
fread
asctime
_sleep
_getmbcp
Sections
.text Size: 2KB - Virtual size: 218KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 614KB - Virtual size: 613KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ