Static task
static1
Behavioral task
behavioral1
Sample
c0e33fe36df04a4197f4e79ac434744f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c0e33fe36df04a4197f4e79ac434744f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c0e33fe36df04a4197f4e79ac434744f_JaffaCakes118
-
Size
11KB
-
MD5
c0e33fe36df04a4197f4e79ac434744f
-
SHA1
207e5f43b74d05524c4087f7d6390dc14b04b682
-
SHA256
162d2911cb7e16eacc93f026aaa88a553c4998d06e8cccb68c98baf2aaebbb86
-
SHA512
c0172e498c26fa53761d1d2213fa59762f77c01a391deba63fc55a738dc950047e6d46fb147ba694cf956b2187ad373d36e4c52004d660ffdf0704512f615a7c
-
SSDEEP
192:/HKosnxR8yPOnUufpo3SnyPE0S80cgZRDK1oynG90Em:fKoER8yP97zS80ciRDK1g90Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0e33fe36df04a4197f4e79ac434744f_JaffaCakes118
Files
-
c0e33fe36df04a4197f4e79ac434744f_JaffaCakes118.exe windows:4 windows x86 arch:x86
07da23296864d11c13453d511501b7c3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GlobalUnlock
GlobalLock
GlobalAlloc
GetWindowsDirectoryA
GetTickCount
SetErrorMode
CreateThread
GetStartupInfoA
GetModuleHandleA
LocalFree
user32
OpenClipboard
FindWindowExA
SendMessageA
IsWindow
FindWindowA
GetMenu
SetForegroundWindow
VkKeyScanA
keybd_event
SetFocus
ShowWindow
EmptyClipboard
SetClipboardData
CloseClipboard
wsprintfA
msvcrt
memmove
memcpy
strlen
??1exception@@UAE@XZ
??0exception@@QAE@ABQBD@Z
_CxxThrowException
??0exception@@QAE@ABV0@@Z
_EH_prolog
_controlfp
_except_handler3
__set_app_type
??3@YAXPAX@Z
sprintf
rand
srand
__CxxFrameHandler
??2@YAPAXI@Z
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
??1type_info@@UAE@XZ
urlmon
URLDownloadToFileA
ole32
CoInitialize
CoUninitialize
CoCreateInstance
oleaut32
VariantClear
SysAllocString
VariantInit
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 684B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE