Static task
static1
Behavioral task
behavioral1
Sample
ba734a388a3ed5a7975c0df17632a62d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ba734a388a3ed5a7975c0df17632a62d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ba734a388a3ed5a7975c0df17632a62d_JaffaCakes118
-
Size
47KB
-
MD5
ba734a388a3ed5a7975c0df17632a62d
-
SHA1
71b29e945a9f8b08a140c6a0aa469bad8f3db46e
-
SHA256
019292916051eeb3e3ee01ee0d96215aec3e022423234849ade92c5269db97e1
-
SHA512
d4fa303982768b43d738a68d83d49b00a55dacb1f7c1b9828e5d8de01e7bf7be3e467211b83f539909c88edd4537f6102a691490f28db23aa566d81e0d7bf8c6
-
SSDEEP
768:sWse/5JtrtLDFxm6DkEJMCmQ+GlIS7a29+CXQFgiJcmP+:oe/ZJLpxm6DZyQ+GlISXR8P+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba734a388a3ed5a7975c0df17632a62d_JaffaCakes118
Files
-
ba734a388a3ed5a7975c0df17632a62d_JaffaCakes118.exe windows:4 windows x86 arch:x86
a3f9c83e7c82d4c3c142288d5a5bfc55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBeep
GetTopWindow
MessageBoxA
LoadIconA
ArrangeIconicWindows
CharUpperA
IsIconic
CharNextA
DestroyIcon
FlashWindow
GetSystemMetrics
RegisterWindowMessageA
ShowWindow
CreateWindowExA
UpdateWindow
SetCursorPos
CharLowerA
SetTimer
ShowCursor
GetMessagePos
SetWindowTextA
ReleaseDC
GetParent
kernel32
lstrlenA
GlobalDeleteAtom
lstrcatA
SetLastError
LoadLibraryA
GetProcAddress
GlobalFindAtomA
FreeLibrary
GetConsoleCP
GetCommandLineA
GetConsoleOutputCP
FindResourceA
CopyFileA
GetLastError
GlobalAddAtomA
Sleep
shell32
ShellAboutA
gdi32
CreateCompatibleDC
SetBkMode
SetTextColor
GetObjectA
GdiFlush
SelectObject
DeleteDC
CreateSolidBrush
ole32
CoFreeUnusedLibraries
CoFreeAllLibraries
CoGetCurrentProcess
comctl32
InitCommonControls
FlatSB_ShowScrollBar
MakeDragList
FlatSB_GetScrollPos
GetEffectiveClientRect
DrawInsert
FlatSB_GetScrollRange
FlatSB_GetScrollProp
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ