Static task
static1
Behavioral task
behavioral1
Sample
b86d187232ecca22a911abe84303f10b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b86d187232ecca22a911abe84303f10b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b86d187232ecca22a911abe84303f10b_JaffaCakes118
-
Size
60KB
-
MD5
b86d187232ecca22a911abe84303f10b
-
SHA1
2b625b15c6c22f716a3a84a0f30c3dcde63278d4
-
SHA256
fb4911d2226ebf8142a2109cbc5bf09cca83146382bc5c0c207adb6d1251d1f7
-
SHA512
3b33913ce684ca2cd3419026419737eefd5f9e94dd5c6d29bab74eb757b8df4928161be839bee6601e24e363ca533808ca96c352fb9083ce4b83d3070e66ab6b
-
SSDEEP
1536:cri4K7G4AWq5baLjOr3CO5B8ba8IxJU46I:mK6pZAOryO5B82JU3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b86d187232ecca22a911abe84303f10b_JaffaCakes118
Files
-
b86d187232ecca22a911abe84303f10b_JaffaCakes118.exe windows:5 windows x86 arch:x86
5d682c796ea609049dab0ece1dd626b5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TranslateMessage
UpdateWindow
ShowWindow
CreateWindowExA
DispatchMessageA
SetWindowTextA
EnableWindow
CheckDlgButton
GetDlgCtrlID
GetClipboardViewer
BeginPaint
LoadIconA
LoadCursorA
RegisterClassExA
WindowFromDC
GetWindowLongA
EndPaint
GetMessageA
gdi32
CreatePatternBrush
CreateEllipticRgn
CreatePen
DeleteObject
SetMapMode
GetStockObject
ole32
CoGetCurrentProcess
OleIsRunning
CoCopyProxy
OleGetClipboard
oleaut32
VectorFromBstr
kernel32
LeaveCriticalSection
DeleteCriticalSection
GetModuleHandleA
InterlockedExchange
GetDriveTypeA
EnterCriticalSection
HeapDestroy
GetStartupInfoA
SetFileAttributesA
GetACP
InitializeCriticalSection
GetLastError
GetEnvironmentStrings
HeapAlloc
HeapCreate
HeapFree
Sections
.text Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ