Static task
static1
Behavioral task
behavioral1
Sample
be3a396bd8fb275859bedff1034aba76_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
be3a396bd8fb275859bedff1034aba76_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
be3a396bd8fb275859bedff1034aba76_JaffaCakes118
-
Size
260KB
-
MD5
be3a396bd8fb275859bedff1034aba76
-
SHA1
b21001dae5f17faea548a393b3edbef253953bac
-
SHA256
40dc0eae10967e1982206da7f4eddf4ecf2d587cc2844d06f2c6cd6f2576469c
-
SHA512
69b28c622bd7ff1d8505f9954a0476bb5342808df14a391b1491999d13f365f839da862ddebdba30662a55cecd7a50f2d8f75449916a3ec2dfc3bf5c9b69adc7
-
SSDEEP
6144:hDl9q9UjCi9MyU7WUFLwrNNa0UxM/TqiC0eR54o9:hDlFMn7W4SvsMLqiMRmy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be3a396bd8fb275859bedff1034aba76_JaffaCakes118
Files
-
be3a396bd8fb275859bedff1034aba76_JaffaCakes118.exe windows:4 windows x86 arch:x86
c59f7ddd61e59ed1627cfe6694598058
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetICMProfileW
GetClipBox
DdEntry53
CreateEllipticRgnIndirect
XLATEOBJ_piVector
DdEntry1
GetEnhMetaFileDescriptionW
MirrorRgn
GdiConsoleTextOut
GetCharWidth32A
DdEntry38
EnumFontFamiliesW
GdiGetLocalFont
EngGetPrinterDataFileName
user32
TrackMouseEvent
MapDialogRect
UpdateWindow
CreateDialogIndirectParamAorW
ShowCursor
DrawTextW
CharLowerA
DrawCaptionTempA
RedrawWindow
TileChildWindows
wvsprintfW
SetMenuItemInfoW
CsrBroadcastSystemMessageExW
CreateIcon
AdjustWindowRect
EditWndProc
RealGetWindowClassW
User32InitializeImmEntryTable
IsWinEventHookInstalled
Sections
.text Size: 250KB - Virtual size: 249KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE