Static task
static1
Behavioral task
behavioral1
Sample
b16b3ce830a07d46b22684c7515d3e5d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b16b3ce830a07d46b22684c7515d3e5d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b16b3ce830a07d46b22684c7515d3e5d_JaffaCakes118
-
Size
110KB
-
MD5
b16b3ce830a07d46b22684c7515d3e5d
-
SHA1
8d0f03afb5884fa9d982193e61c8edc0d0a244d3
-
SHA256
e44bdf119866b33c7ef302f34c5f60703ca730a88967b6d09b74630118b177b8
-
SHA512
ec45f76844ac84cd787f7e50016aa7e09c4ffa4e2754257094239d6ffd2d403902188f1be227c63b81f1bfd2d5d9d782840d5fa7462b07e7260cf267b601b6d4
-
SSDEEP
1536:h0LFGxfLR3JaTNjDTJIBTtL9qfEovoWODtaqPhNm1ekqan2oMI:hMGh1Ja1q3L9qfHIDbJNvV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b16b3ce830a07d46b22684c7515d3e5d_JaffaCakes118
Files
-
b16b3ce830a07d46b22684c7515d3e5d_JaffaCakes118.exe windows:4 windows x86 arch:x86
3a399fea71366d5fe6375f2b27eb116a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCPInfo
GetModuleHandleA
CreateThread
SetEvent
VirtualAlloc
lstrlenA
lstrcatA
ExitProcess
GetStringTypeW
GetDateFormatA
GetProcAddress
GetEnvironmentStrings
LocalAlloc
VirtualAllocEx
GetLocalTime
GlobalAlloc
FindFirstFileA
GetACP
GetOEMCP
GetThreadLocale
SizeofResource
gdi32
SetBkColor
CreatePenIndirect
GetDIBColorTable
GetRgnBox
GetPixel
CreateDIBitmap
CreateFontIndirectA
GetDCOrgEx
shell32
SHFileOperationA
Shell_NotifyIconA
SHGetFolderPathA
SHGetFileInfoA
version
VerFindFileA
GetFileVersionInfoA
user32
ShowWindow
GetScrollRange
CharUpperBuffA
EnumWindows
DestroyWindow
GetDC
SetWindowsHookExA
TrackPopupMenu
GetKeyboardLayoutNameA
DrawIconEx
GetFocus
EnableMenuItem
ReleaseDC
InsertMenuA
GetClassLongA
GetMenuState
GetClassInfoA
MessageBeep
SetScrollInfo
CallWindowProcA
GetActiveWindow
DrawFrameControl
DestroyIcon
GetMenuItemCount
ClientToScreen
SetPropA
IsRectEmpty
CharNextW
SystemParametersInfoA
DestroyCursor
GetForegroundWindow
RemovePropA
InsertMenuItemA
GetKeyboardState
DestroyMenu
GetIconInfo
CreatePopupMenu
DeleteMenu
GetKeyState
LoadKeyboardLayoutA
PtInRect
ShowScrollBar
SendMessageA
UnregisterClassA
GetWindowLongA
GetSystemMetrics
GetDesktopWindow
FindWindowA
GetWindowLongW
SetWindowPos
ShowOwnedPopups
SetCursor
InvalidateRect
CloseClipboard
GetScrollPos
CallNextHookEx
CreateIcon
GetPropA
SetClipboardData
ReleaseCapture
GetParent
SetActiveWindow
GetClipboardData
ScrollWindow
GetCursor
IsWindowUnicode
EnumThreadWindows
PostMessageA
MessageBoxA
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 996B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ