Static task
static1
Behavioral task
behavioral1
Sample
c767ed0fd857211da8912522feade7b9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c767ed0fd857211da8912522feade7b9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c767ed0fd857211da8912522feade7b9_JaffaCakes118
-
Size
108KB
-
MD5
c767ed0fd857211da8912522feade7b9
-
SHA1
f6dc3d0668d6559578f4072a9679966f023d0588
-
SHA256
56b9e4327ce813082457cb9887cb9047c5f4a52714e78e41922aa954eb628429
-
SHA512
fc354e5187b5690d6f86e54ab3c27b2c8574870145b17c5dbfffc8d172f16ea5ee8881689221676ae9a4fee64be0e1b43f08b217c922eb1f99d230aab324c77a
-
SSDEEP
1536:AdKWk2RKCqDyi0xY5eTmvw0j0Y6+8rCfe+p8qEIkq804:AAwzi0GZvw9Y6prae+p8XLP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c767ed0fd857211da8912522feade7b9_JaffaCakes118
Files
-
c767ed0fd857211da8912522feade7b9_JaffaCakes118.exe windows:4 windows x86 arch:x86
d5ea15b5851add8df9dee74197eadf9e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeA
kernel32
VirtualQuery
GetStdHandle
FindFirstFileA
FindClose
GetSystemDefaultLangID
ExitThread
GetDiskFreeSpaceA
VirtualAllocEx
Sleep
GlobalAlloc
MoveFileExA
SetThreadLocale
VirtualFree
GetModuleHandleA
GetProcAddress
gdi32
SaveDC
CopyEnhMetaFileA
CreatePalette
GetDIBColorTable
GetPixel
BitBlt
GetClipBox
CreateBrushIndirect
SetPixel
user32
SetClipboardData
EnumWindows
GetSubMenu
PeekMessageA
IsRectEmpty
CheckMenuItem
TranslateMDISysAccel
DrawEdge
GetWindowLongW
DefMDIChildProcA
GetClassNameA
IsDialogMessageA
RegisterClipboardFormatA
ScreenToClient
ChildWindowFromPoint
InsertMenuA
FrameRect
IsWindow
GetMenuItemID
wsprintfA
MsgWaitForMultipleObjects
IsWindowVisible
GetWindowTextA
GetKeyboardLayoutList
IsWindowEnabled
EnableScrollBar
WaitMessage
GetSystemMenu
FindWindowA
CreateWindowExA
OpenClipboard
LoadStringA
MessageBeep
GetFocus
GetKeyboardLayout
GetCapture
ScrollWindow
DrawMenuBar
LoadCursorA
SetScrollRange
RegisterWindowMessageA
GetDlgItem
GetMenuItemCount
UnhookWindowsHookEx
GetSystemMetrics
DispatchMessageW
IntersectRect
FillRect
SetWindowsHookExA
DestroyMenu
CreatePopupMenu
CallNextHookEx
InsertMenuItemA
PostQuitMessage
CharNextA
SendMessageW
ShowOwnedPopups
PostMessageA
MapVirtualKeyA
ActivateKeyboardLayout
DefWindowProcA
CloseClipboard
GetScrollInfo
DrawIcon
DefFrameProcA
GetWindowRect
WindowFromPoint
RegisterClassA
GetIconInfo
RedrawWindow
TranslateMessage
MessageBoxA
AdjustWindowRectEx
GetMenuItemInfoA
GetDCEx
SetMenu
GetWindow
ShowWindow
GetSysColorBrush
GetCursor
EnumThreadWindows
DrawFrameControl
EndPaint
OemToCharA
SetClassLongA
GetPropA
DispatchMessageA
GetActiveWindow
GetClipboardData
SetCursor
EnumChildWindows
SetPropA
SetForegroundWindow
GetWindowPlacement
DrawAnimatedRects
shell32
SHGetDesktopFolder
SHFileOperationA
SHGetFileInfoA
Sections
CODE Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE