Static task
static1
Behavioral task
behavioral1
Sample
ad18379ab87260d38d0e94ffe2ef8ea6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ad18379ab87260d38d0e94ffe2ef8ea6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ad18379ab87260d38d0e94ffe2ef8ea6_JaffaCakes118
-
Size
104KB
-
MD5
ad18379ab87260d38d0e94ffe2ef8ea6
-
SHA1
60cc3932f78c71c30f43773e08a54a1cf8db7bc9
-
SHA256
403b341dc25cfb9000de80360c95f15128664faf5b253dc184dab31e2a97c834
-
SHA512
6a52bee0b7c009172a61b6666ca9ecb527666309203f76a223f553ed6909ab8f0c36d509b44f1e3929513e9810c397f8c819c44b2ec158cfb4d2b5bcbeb709e9
-
SSDEEP
1536:3mKBkZbBSxyeRj1stAWlHPSYsGoiRzBhj4+Ubc:3OZFYlePSYsGoiRzB7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad18379ab87260d38d0e94ffe2ef8ea6_JaffaCakes118
Files
-
ad18379ab87260d38d0e94ffe2ef8ea6_JaffaCakes118.exe windows:4 windows x86 arch:x86
a2c80f66bbd9d1472a0a9a4f6e6154b3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetExitCodeProcess
TerminateProcess
GetFileSize
CreateFileA
ReadFile
SetEndOfFile
LCMapStringW
LCMapStringA
FlushFileBuffers
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
VirtualAlloc
SetFilePointer
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
CreateMutexA
GetLastError
FormatMessageA
LocalFree
Sleep
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
FindFirstFileA
FindClose
MulDiv
LocalAlloc
CreateProcessA
OpenProcess
ReadProcessMemory
WriteProcessMemory
ResumeThread
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
OpenMutexA
GetModuleFileNameA
SetCurrentDirectoryA
DeleteFileA
SetFileAttributesA
FindNextFileA
MoveFileA
RemoveDirectoryA
GetProcAddress
FreeLibrary
LoadLibraryA
ExitProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
HeapReAlloc
HeapSize
CloseHandle
user32
MessageBoxA
EnumThreadWindows
GetForegroundWindow
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
UpdateWindow
PeekMessageA
TranslateMessage
DispatchMessageA
BeginPaint
EndPaint
AdjustWindowRectEx
IsIconic
SystemParametersInfoA
DefWindowProcA
GetWindowDC
GetClientRect
SetWindowTextA
MoveWindow
ShowWindow
GetWindowRect
SetForegroundWindow
BringWindowToTop
GetTabbedTextExtentA
GetDesktopWindow
GetDC
ReleaseDC
PostMessageA
PostThreadMessageA
gdi32
GetMapMode
SetMapMode
GetDeviceCaps
DPtoLP
RoundRect
BitBlt
CreateCompatibleDC
SetTextColor
DeleteDC
CreateSolidBrush
Rectangle
SetBkMode
LPtoDP
TextOutA
CreateFontA
SelectObject
DeleteObject
CreateDIBSection
advapi32
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptImportKey
CryptVerifySignatureA
CryptDestroyKey
CryptDestroyHash
CryptReleaseContext
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
ole32
CreateStreamOnHGlobal
oleaut32
OleLoadPicture
winmm
timeGetTime
imagehlp
UnMapAndLoad
MapAndLoad
comctl32
_TrackMouseEvent
Sections
.text Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 20KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.FFF Size: 256B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE