Static task
static1
Behavioral task
behavioral1
Sample
ce2267f5034ab0a115e5255e16faf3f3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce2267f5034ab0a115e5255e16faf3f3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce2267f5034ab0a115e5255e16faf3f3_JaffaCakes118
-
Size
219KB
-
MD5
ce2267f5034ab0a115e5255e16faf3f3
-
SHA1
12e60f7550b1b722912e4b0c13d8032796559e3c
-
SHA256
e3ed6bb0882093defb346639d675b1b4ea05255753fe6ea7e43d7fbd16d36d22
-
SHA512
7e96333b5d6641dee8cc604d43ed49e5851eee3d7b5a4e483acb4e02cf31b1acdadc640ee1862c34ca24fba427db370c7f870c8e79dd5b5abe6cc7d7ac90ffe6
-
SSDEEP
6144:Vu8YeBy2avY7nUPuDBWhCXssF2NYs36jEaozPNng:Vtny2QIMorQz6Efpng
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce2267f5034ab0a115e5255e16faf3f3_JaffaCakes118
Files
-
ce2267f5034ab0a115e5255e16faf3f3_JaffaCakes118.exe windows:4 windows x86 arch:x86
b85460f12e82dca18287ea3a95de8f6c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetTempPathA
FindClose
CreateFileA
GetBinaryTypeW
GetTempPathW
GetBinaryTypeA
LoadLibraryA
CloseHandle
CreateFileW
GetFileType
GetModuleHandleW
GetStartupInfoA
user32
DestroyWindow
DrawTextW
DefWindowProcA
CloseClipboard
DrawTextA
BeginPaint
CloseWindow
GetWindowTextA
GetWindow
IsWindowEnabled
EmptyClipboard
IsWindowVisible
DefWindowProcW
ShowWindow
DeleteMenu
EnableWindow
GetWindowRect
gdi32
BitBlt
CreateRectRgn
FillRgn
oleaut32
GetErrorInfo
SafeArrayCopy
SysAllocString
CreateErrorInfo
SetErrorInfo
SysAllocStringLen
SafeArrayCreate
SysAllocStringByteLen
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
malloc
strcmp
free
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ