Static task
static1
Behavioral task
behavioral1
Sample
c8da6e366cd5a482a00cdeb5f92dd827_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c8da6e366cd5a482a00cdeb5f92dd827_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c8da6e366cd5a482a00cdeb5f92dd827_JaffaCakes118
-
Size
336KB
-
MD5
c8da6e366cd5a482a00cdeb5f92dd827
-
SHA1
d253adb12b6f9b9674a22eec032fc4dca518225d
-
SHA256
1116c91e9278176faa33892799a4eb2e786dd1f6f7a2352d0be5def87e838e8a
-
SHA512
e21322af296611aef6d69bb18363e0415b53b8365d3b659a785da7165d96fd7c929c465505dc218ee1371fba35f03b2a35445238c93999517b4f3cda7975bd7a
-
SSDEEP
6144:htLGhBJ0xPcK1mPNL/lbSvSa4sbHYATzFCBTWzGVow:7ahBaExVDlbYLYWzFZGVF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8da6e366cd5a482a00cdeb5f92dd827_JaffaCakes118
Files
-
c8da6e366cd5a482a00cdeb5f92dd827_JaffaCakes118.exe windows:4 windows x86 arch:x86
5fded1ef678e409a3274b8588d6cdabf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenSemaphoreA
GetStringTypeA
GetOEMCP
GetLastError
GlobalAlloc
GetTickCount
GlobalFree
GetProcAddress
LoadLibraryA
GetModuleHandleA
ExitProcess
QueryPerformanceFrequency
ExitThread
Sleep
FreeLibrary
CreateFileA
CreateMutexA
SetThreadPriority
WaitForSingleObject
CloseHandle
TerminateThread
GetComputerNameA
GetModuleFileNameA
VirtualAlloc
VirtualProtect
GetProcessHeap
CreateThread
GetProcessVersion
GetConsoleTitleA
LoadResource
GetCommandLineA
GetVersionExA
CreateSemaphoreA
OpenMutexA
ReleaseMutex
ReleaseSemaphore
CreateRemoteThread
GetStringTypeW
CreateEventA
GetStringTypeExA
GetLocaleInfoA
GetCPInfo
GetACP
LCMapStringW
LCMapStringA
MultiByteToWideChar
VirtualQuery
InterlockedExchange
RtlUnwind
SetStdHandle
RaiseException
GetSystemTimeAsFileTime
GetSystemInfo
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
FlushFileBuffers
HeapReAlloc
VirtualFree
GetProcessHeaps
EnumCalendarInfoA
WriteFile
SetFilePointer
GetCurrentProcess
TerminateProcess
GetStdHandle
WideCharToMultiByte
HeapFree
HeapAlloc
gdi32
GetCharWidth32A
GetTextMetricsA
GdiFlush
GetCharWidthA
GetCharWidthFloatA
GetCharABCWidthsA
TextOutA
user32
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
GetWindowLongA
SetWindowLongA
RegisterWindowMessageA
FindWindowA
TranslateAcceleratorA
EndPaint
DrawTextA
SetRect
DefWindowProcA
DrawTextExA
ReleaseDC
GetDC
HideCaret
MessageBeep
GetCaretPos
SendMessageA
wsprintfA
GetClientRect
ShowCaret
SetCaretPos
CreateCaret
PostQuitMessage
UnregisterHotKey
comctl32
ord17
ws2_32
WSAAccept
wldap32
ord143
ord20
ord11
ord10
ord25
winmm
timeBeginPeriod
ole32
OleCreateMenuDescriptor
GetClassFile
mprapi
MprAdminGetErrorString
winspool.drv
OpenPrinterA
EnumFormsA
AddPortA
ClosePrinter
Sections
.text Size: 268KB - Virtual size: 265KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.du1 Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.udata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ