Static task
static1
Behavioral task
behavioral1
Sample
ce71cf8f56c9fda415c64594da49e4c2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ce71cf8f56c9fda415c64594da49e4c2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce71cf8f56c9fda415c64594da49e4c2_JaffaCakes118
-
Size
49KB
-
MD5
ce71cf8f56c9fda415c64594da49e4c2
-
SHA1
492ebdb109f6579eeffe62965c31385d06d90f13
-
SHA256
241183a7f1cfd926f7559cac6d8874161b6ae9864dd498a60882fa7511c737f4
-
SHA512
41f484364adcbfa1ec18b9924c90f8e4314385db1c85408c498a106eb4a5431c1f0c025583036bdc01308af44774b421779bf4eb06637790d50c9e413510b8aa
-
SSDEEP
768:IBjFF04v+mjjfJNnJRx70zm5tdHi+hoIt4/7w+dJ+UF6fly2FZ546QUGLHJrStQl:220Nnp0zCtd5tKwsJ3F6flI2wprS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce71cf8f56c9fda415c64594da49e4c2_JaffaCakes118
Files
-
ce71cf8f56c9fda415c64594da49e4c2_JaffaCakes118.exe windows:5 windows x86 arch:x86
7e4d24d1af439bd7600d8d306639c6ca
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDlgItem
MsgWaitForMultipleObjects
CloseWindowStation
CharLowerBuffA
ToUnicode
CloseDesktop
PeekMessageA
ExitWindowsEx
PeekMessageW
GetKeyState
LoadCursorW
SendMessageW
DispatchMessageW
GetCursorPos
GetDlgItemTextW
GetKeyboardState
EndDialog
FindWindowExW
GetForegroundWindow
GetMessageA
GetWindowTextW
GetClipboardData
OpenWindowStationA
OpenDesktopA
GetWindowThreadProcessId
GetWindowLongW
GetClassNameW
SetProcessWindowStation
SetThreadDesktop
DrawIcon
GetIconInfo
GetDlgItemTextA
GetMessageW
kernel32
lstrcmpiA
GetTempFileNameW
GetCommandLineA
GetModuleFileNameA
SetFileAttributesW
InitializeCriticalSection
SetEvent
WriteFile
MultiByteToWideChar
HeapAlloc
GetCurrentProcessId
GetProcessTimes
GetFileSizeEx
SystemTimeToFileTime
CreateProcessW
lstrlenA
GetModuleFileNameW
GetComputerNameW
FindClose
FindFirstFileW
FlushFileBuffers
SetFilePointer
GlobalLock
lstrcatA
ReadFile
WaitForSingleObject
SetThreadPriority
GetFileTime
Sleep
IsBadReadPtr
FindNextFileW
WideCharToMultiByte
lstrlenW
GetLocalTime
GlobalUnlock
GetLogicalDrives
CloseHandle
CreateEventW
GetDriveTypeW
ExpandEnvironmentStringsW
GetModuleHandleA
GetVersionExW
GetExitCodeProcess
lstrcpyW
OpenProcess
LeaveCriticalSection
MapViewOfFile
GetTickCount
SetFileTime
GetProcessHeap
lstrcatW
GetThreadPriority
SetLastError
GetTempPathW
EnterCriticalSection
lstrcpyA
UnmapViewOfFile
Sections
.qdgv Size: 39KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.lmbeb Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pgt Size: 7KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ