Static task
static1
Behavioral task
behavioral1
Sample
ceb5cbc382e20289a3ba801828003ff7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ceb5cbc382e20289a3ba801828003ff7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ceb5cbc382e20289a3ba801828003ff7_JaffaCakes118
-
Size
47KB
-
MD5
ceb5cbc382e20289a3ba801828003ff7
-
SHA1
3da5a4fdb5c9aea5d841a68c8edfc6ecc2fce7ae
-
SHA256
bf89f54a403cc615837ab1c48d539dcf4e339a7a65ac3b8a68f03c40e26ea421
-
SHA512
ee5480a60e4c87c2a7340ef3e36f719d519d47e22546c8aedc7139aa89cfc32967f62f65d4571909d6fa9d84a8f205365d1da5b42c2b8905b720c6557ee2e378
-
SSDEEP
768:Kt3Xhp4navKfItltHQFnC1teDo+vMOoIZrOizT32tOPb47T4L5LfW1:IXquQ2ltHQ+teDzMOLrOwT32tOPb4H4U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ceb5cbc382e20289a3ba801828003ff7_JaffaCakes118
Files
-
ceb5cbc382e20289a3ba801828003ff7_JaffaCakes118.exe windows:4 windows x86 arch:x86
989ae6d3446c4a86f42c1ec24735f08e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
GetStringTypeA
GetACP
SetFilePointer
GetStdHandle
GetStringTypeW
lstrcpynW
GetCommandLineA
WriteFile
TerminateProcess
LCMapStringW
lstrcatA
GetFileType
lstrcpynA
GetCPInfo
lstrcpyA
GetVersion
SetHandleCount
GetOEMCP
LCMapStringA
GetCurrentProcess
CreateFileA
GetModuleFileNameA
GetStartupInfoA
user32
GetDC
DrawIcon
DialogBoxParamW
GetFocus
InsertMenuA
GetDlgItem
DialogBoxParamA
CloseWindow
CopyRect
LoadMenuA
GetWindowTextLengthA
DrawTextW
EndDialog
GetCursor
GetMenu
CopyImage
GetWindowTextA
IsMenu
CreateIcon
LoadCursorA
CopyIcon
IsWindow
DrawIconEx
comctl32
ImageList_AddIcon
CreateToolbar
CreateStatusWindow
CreateMappedBitmap
ImageList_Draw
DllGetVersion
ImageList_Add
ImageList_Destroy
CreateToolbarEx
MenuHelp
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 42KB - Virtual size: 16.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ