Static task
static1
Behavioral task
behavioral1
Sample
b1979679f9756df65816fbca80954470_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b1979679f9756df65816fbca80954470_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b1979679f9756df65816fbca80954470_JaffaCakes118
-
Size
561KB
-
MD5
b1979679f9756df65816fbca80954470
-
SHA1
a4edd90bd3a7165fdc745624c8a9f702a493d876
-
SHA256
48c251107fd1bebde01ef4e324cf187e8064b3299a36d1075750fbdc32d6d906
-
SHA512
279d3fb91a15f2cc5ac718aae8ce0559c7c83bb932bceaf15aaf97ee303d983c06a20b88dfbdcc76800d06bb205adec070143f6035f075bbfe81487e9e636af2
-
SSDEEP
12288:TcDZfhtdHuO8Qu0oJcsdS2jXYv3kHqBk2SjfDwZM4Kz/VD:TcDZfhtdHuODUchuXQkuhSjfp/p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1979679f9756df65816fbca80954470_JaffaCakes118
Files
-
b1979679f9756df65816fbca80954470_JaffaCakes118.exe windows:4 windows x86 arch:x86
da0e7550a8a350401812758a11a4ab10
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetUserObjectSecurity
SetWindowLongA
DefFrameProcA
GetCursorPos
UnloadKeyboardLayout
UnhookWindowsHook
GetMenuState
ShowCursor
IsCharLowerW
EnumWindowStationsA
wsprintfA
MonitorFromWindow
InsertMenuA
DefFrameProcW
BringWindowToTop
GetInputState
IsCharLowerA
DrawTextExA
OpenDesktopA
SetMessageQueue
GetDCEx
GetWindowInfo
LoadKeyboardLayoutA
HiliteMenuItem
SetCaretBlinkTime
IsMenu
CloseDesktop
keybd_event
ChangeClipboardChain
DrawTextW
OpenWindowStationA
IsDialogMessageA
kernel32
QueryDosDeviceW
GetFileInformationByHandle
FormatMessageW
WritePrivateProfileStringA
GlobalReAlloc
SetNamedPipeHandleState
GetSystemTime
FindFirstFileExW
PurgeComm
FindCloseChangeNotification
GetStringTypeExW
TryEnterCriticalSection
SetFileAttributesA
RemoveDirectoryW
SetConsoleMode
GetFileAttributesExA
CreatePipe
GlobalGetAtomNameW
FreeEnvironmentStringsA
SetCommTimeouts
GetLogicalDriveStringsA
ReadConsoleA
FlushFileBuffers
ExitProcess
LocalFileTimeToFileTime
GetSystemDefaultLangID
VirtualProtect
GlobalFindAtomA
CreateIoCompletionPort
advapi32
GetFileSecurityA
RegEnumKeyW
CryptCreateHash
ChangeServiceConfigW
RegUnLoadKeyW
RegDeleteKeyW
RegEnumValueA
CryptVerifySignatureW
Sections
.text Size: 1KB - Virtual size: 217KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 262KB - Virtual size: 262KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ