Static task
static1
Behavioral task
behavioral1
Sample
ac8f01bc8ba4735ee10a3f391d765732_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ac8f01bc8ba4735ee10a3f391d765732_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ac8f01bc8ba4735ee10a3f391d765732_JaffaCakes118
-
Size
251KB
-
MD5
ac8f01bc8ba4735ee10a3f391d765732
-
SHA1
3ac829e08414dd78349118fb65379e5ee27c8581
-
SHA256
26a4da56ccc5ccc3229b067e2207fa07033662170dafc024ae3333ec2108576a
-
SHA512
a43e59a23ef4cc870100be15b76f841a1746e387f7411c94b318421f0efb91a85ce89bf8a200d8db37de19a0efdcd8ac3959c5704a463f8cdb2773267dd56784
-
SSDEEP
6144:1rjqWx7SySZ7oRvzTwT9A3hvD9b984jdb0uuqnMU:xfx7E7olzTWWRFN0urnMU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac8f01bc8ba4735ee10a3f391d765732_JaffaCakes118
Files
-
ac8f01bc8ba4735ee10a3f391d765732_JaffaCakes118.exe windows:4 windows x86 arch:x86
6c5d0480f0d63d2a411dd727d66b92c1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TranslateMessage
DispatchMessageW
GetSysColorBrush
MessageBeep
GetNextDlgGroupItem
CreateWindowExW
InvalidateRgn
PostMessageW
UpdateWindow
SetTimer
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
EnableWindow
PostQuitMessage
SetWindowPos
MapDialogRect
GetParent
SetWindowContextHelpId
GetWindow
EndDialog
GetNextDlgTabItem
IsWindowEnabled
GetDlgItem
GetWindowLongW
kernel32
GetCurrentDirectoryA
GetSystemInfo
ReleaseMutex
CreateFileA
CreateMutexW
ResetEvent
SetEvent
CreateEventW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
ExitProcess
SetFilePointer
oleaut32
DispGetIDsOfNames
OleLoadPicture
QueryPathOfRegTypeLib
GetErrorInfo
SetErrorInfo
VariantClear
OleLoadPictureEx
advapi32
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA
shlwapi
PathFindExtensionA
Sections
.text Size: 169KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 266B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ