Static task
static1
Behavioral task
behavioral1
Sample
a8d15a3d8cb3a35941292ccd447c3f4d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a8d15a3d8cb3a35941292ccd447c3f4d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a8d15a3d8cb3a35941292ccd447c3f4d_JaffaCakes118
-
Size
78KB
-
MD5
a8d15a3d8cb3a35941292ccd447c3f4d
-
SHA1
10e6beb8737505fbeb11e5e21dcb9357732d8e2c
-
SHA256
5eb7584d4ef06c54c24efd185acfd118061ee782068e3357e28a2268b0ac8256
-
SHA512
abc362f6c756c14af3c14b7911cbf638071f67dbf787567b0f7f33ad31865fde574243c89dbc7e8d3e31aad9e497cc8acbf6fcefefc08f6841bfdf00d62e3cac
-
SSDEEP
1536:Gur0SdJTY9Z1vzWwICSYmK3tj1V8yCWaTK2jd/lYSiVe:trfvaXzWwIZKdjTwWaTlDjiVe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8d15a3d8cb3a35941292ccd447c3f4d_JaffaCakes118
Files
-
a8d15a3d8cb3a35941292ccd447c3f4d_JaffaCakes118.exe windows:5 windows x86 arch:x86
bf0f00c80a62928d4296a2c955ef08d8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapDestroy
FreeLibrary
LocalFree
ReadFile
CloseHandle
GetModuleHandleW
InterlockedIncrement
GetSystemTimeAsFileTime
GetVersionExA
CreateFileW
VirtualAlloc
DisableThreadLibraryCalls
GetModuleFileNameA
SetLastError
UnhandledExceptionFilter
LocalFree
GetModuleFileNameA
VirtualAlloc
HeapDestroy
GetCurrentProcessId
LoadLibraryW
GetProcessHeap
GetCurrentProcessId
LeaveCriticalSection
DeleteCriticalSection
DisableThreadLibraryCalls
DeleteCriticalSection
GetCurrentProcess
CreateThread
GetModuleHandleW
VirtualAlloc
GetModuleHandleA
GetProcessHeap
GetCurrentProcess
MultiByteToWideChar
GetSystemTimeAsFileTime
FreeLibrary
GetLastError
InterlockedCompareExchange
lstrcmpiW
Sleep
GetProcessHeap
LeaveCriticalSection
SetLastError
ReadFile
CreateEventW
UnhandledExceptionFilter
lstrcmpiW
Sleep
FreeLibrary
CreateEventW
GetTickCount
GetLastError
GetModuleHandleA
GetModuleHandleW
user32
GetClientRect
GetDlgItem
IsDlgButtonChecked
SetDlgItemTextW
CharNextW
SetWindowPos
LoadIconW
SendMessageW
GetDC
GetDesktopWindow
PostQuitMessage
GetDesktopWindow
SetWindowLongW
SendDlgItemMessageW
GetWindowRect
SetWindowTextW
KillTimer
DefWindowProcW
CreateWindowExW
GetDlgItem
GetWindowRect
SendMessageW
GetWindowLongW
EnableWindow
BeginPaint
DefWindowProcW
InvalidateRect
wsprintfA
SendDlgItemMessageW
CreateWindowExW
SetDlgItemTextW
EndDialog
SetFocus
EndPaint
BeginPaint
DispatchMessageW
LoadCursorW
SetDlgItemTextW
BeginPaint
GetClientRect
GetSysColor
SetWindowPos
LoadIconW
DestroyWindow
TranslateMessage
LoadIconW
GetClientRect
SetWindowTextW
DestroyWindow
SendDlgItemMessageW
CharNextW
wsprintfA
GetWindowRect
ShowWindow
IsWindow
EndPaint
InvalidateRect
CreateWindowExW
EnableWindow
Sections
.text Size: 72KB - Virtual size: 76KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ