Static task
static1
Behavioral task
behavioral1
Sample
c1ff900a4edfb323ef34b9260e6290b2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c1ff900a4edfb323ef34b9260e6290b2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c1ff900a4edfb323ef34b9260e6290b2_JaffaCakes118
-
Size
21KB
-
MD5
c1ff900a4edfb323ef34b9260e6290b2
-
SHA1
aaa101e9cd5c8cd86bf5e454d8e8ddaa01c5ddf1
-
SHA256
14639671bb29669f0d0d5b4c3cd3af92135bbd024dc830385e4b64967363d83c
-
SHA512
ec8b0fd10af083d6edb18c88e5c84f4fcb20917c3c3e4d9bc3f21a8f6c9c0781865e4a9d704359bf90942ac3ba378003c6e3a1e2d1a871874fc4f6df55e14262
-
SSDEEP
384:ByyyyyyyyyyyyyyyyUaNRi3Sk5iqpTiLVOeONWlA77m3GPTr2v7Ac:ByyyyyyyyyyyyyyyyUa3GixOevepP9c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1ff900a4edfb323ef34b9260e6290b2_JaffaCakes118
Files
-
c1ff900a4edfb323ef34b9260e6290b2_JaffaCakes118.exe windows:42029 windows x86 arch:x86
0acd91159d86a571ea38756cbb8b163f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
LocalFree
GetStartupInfoA
GetModuleHandleW
ExitProcess
InterlockedIncrement
MultiByteToWideChar
VirtualAlloc
VirtualAlloc
lstrcmpiW
WriteFile
EnterCriticalSection
GetModuleHandleA
SetUnhandledExceptionFilter
lstrcpyW
MultiByteToWideChar
CreateThread
VirtualAlloc
LoadLibraryA
TerminateProcess
EnterCriticalSection
InterlockedDecrement
HeapAlloc
InterlockedIncrement
LocalFree
HeapDestroy
GetProcessHeap
LoadLibraryA
Sleep
GetCurrentProcess
HeapReAlloc
GetStartupInfoW
SetLastError
MultiByteToWideChar
HeapDestroy
GetLastError
LocalAlloc
lstrcmpiW
CreateThread
VirtualFree
GetCurrentProcessId
GetVersionExA
DeleteCriticalSection
ReadFile
GetVersionExA
GetProcAddress
user32
SendMessageA
DispatchMessageW
IsDlgButtonChecked
SendDlgItemMessageW
LoadIconW
KillTimer
DestroyIcon
GetDesktopWindow
SetRect
LoadCursorW
CreateDialogParamW
KillTimer
MessageBeep
GetDlgItemTextW
IsIconic
GetParent
GetClientRect
GetWindow
FillRect
CallWindowProcW
MoveWindow
IsDialogMessageW
SendMessageA
EndDialog
MessageBoxA
InvalidateRect
SetCursor
MoveWindow
DialogBoxParamW
EnableMenuItem
IsDlgButtonChecked
CreateDialogParamW
EnableWindow
GetFocus
LoadIconW
LoadStringA
SetForegroundWindow
SetDlgItemTextW
PtInRect
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ