Static task
static1
Behavioral task
behavioral1
Sample
ceba404f0f6853bdde11d6688c74e2a9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ceba404f0f6853bdde11d6688c74e2a9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ceba404f0f6853bdde11d6688c74e2a9_JaffaCakes118
-
Size
97KB
-
MD5
ceba404f0f6853bdde11d6688c74e2a9
-
SHA1
2c0ec20640674b9cd11a6bc3e24f91beae3f403b
-
SHA256
a350fb3947b1c951093c391e5966aaf54723a9eb4eb1f7a1e36e109578901493
-
SHA512
9d741671a1feefd012ae290a3cbc1419bffc72151ea074413712bd5987d6e642c236efa7410ad7c493472bed08da495963f6cdd265199e8e43a2c958a1e4fd25
-
SSDEEP
1536:5BSEYGOy2GsHdbqcsn8GTJs6HbF95WSMjTENa1esOlKnasbAx/8:bS2OyobIbtX7lfXJsDPcC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ceba404f0f6853bdde11d6688c74e2a9_JaffaCakes118
Files
-
ceba404f0f6853bdde11d6688c74e2a9_JaffaCakes118.exe windows:4 windows x86 arch:x86
928309ce7752acb746de2546b04d0e55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMenu
EnableScrollBar
GetIconInfo
GetFocus
SetTimer
GetWindowTextA
GetScrollInfo
EqualRect
BeginPaint
CreateIcon
DrawTextA
GetDCEx
GetSubMenu
CallWindowProcA
DeferWindowPos
EndPaint
CharLowerA
GetKeyNameTextA
GetPropA
GetMessagePos
SystemParametersInfoA
FillRect
GetLastActivePopup
RegisterClassA
SetWindowPos
IsChild
DrawEdge
GetClientRect
CreateMenu
GetForegroundWindow
GetClassLongA
GetSysColor
CreatePopupMenu
GetCursor
BeginDeferWindowPos
DefMDIChildProcA
GetClassInfoA
EnableWindow
SetCursor
GetMenuState
DefFrameProcA
EnumChildWindows
GetScrollRange
IsWindowVisible
EnableMenuItem
GetDC
IsMenu
GetMenuItemCount
DrawMenuBar
CharNextA
MessageBoxA
DrawFrameControl
FindWindowA
GetWindow
ShowWindow
GetDesktopWindow
GetClipboardData
GetParent
GetMenuItemInfoA
CallNextHookEx
GetMenuStringA
CharLowerBuffA
GetMenu
SystemParametersInfoA
CreatePopupMenu
SetTimer
GetActiveWindow
SetWindowLongA
BeginPaint
IsMenu
GetForegroundWindow
DefMDIChildProcA
GetPropA
ClientToScreen
GetSysColorBrush
GetCapture
EnableMenuItem
EndPaint
GetMessagePos
GetCursor
BeginDeferWindowPos
GetDC
GetDlgItem
GetFocus
GetDCEx
GetScrollPos
SetWindowPos
GetWindow
SetWindowTextA
EnumWindows
GetCursorPos
GetMenuItemInfoA
IsWindowEnabled
DrawEdge
GetMenuState
GetClipboardData
GetLastActivePopup
GetSubMenu
DrawTextA
CallNextHookEx
GetIconInfo
GetMenuStringA
FindWindowA
kernel32
GetModuleFileNameA
GetFileSize
HeapAlloc
VirtualFree
GetUserDefaultLCID
Sleep
GetOEMCP
lstrcatA
GetModuleHandleA
GetDateFormatA
WriteFile
HeapFree
GlobalAlloc
DeleteFileA
GetACP
ExitThread
FindResourceA
FormatMessageA
GetCPInfo
GetFileType
VirtualAlloc
GetStartupInfoA
CloseHandle
EnumCalendarInfoA
SetFilePointer
LoadLibraryExA
GetVersionExA
advapi32
RegLoadKeyA
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
VerQueryValueA
shlwapi
StrCSpnA
StrStrA
StrCatBuffA
SHEnumValueA
StrCmpICA
StrToIntExA
StrStrIA
gdi32
CreateDIBitmap
LineTo
CreateFontIndirectA
GetDCOrgEx
SetBkColor
msvcrt
mbstowcs
_wfopen
time
__wgetmainargs
_XcptFilter
srand
memset
_unlock
swprintf
malloc
rand
time
exit
_amsg_exit
_XcptFilter
__wgetmainargs
sprintf
_unlock
atol
comdlg32
GetFileTitleA
GetOpenFileNameA
FindTextA
ChooseColorA
ole32
CoRevokeClassObject
GetHGlobalFromStream
CoReleaseMarshalData
CoGetMalloc
StringFromIID
PropVariantClear
OleRegGetUserType
shell32
SHGetSpecialFolderLocation
SHGetDiskFreeSpaceA
Sections
text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 133KB - Virtual size: 225KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ