Static task
static1
Behavioral task
behavioral1
Sample
cf13d8b6edd216267b941e910501f45a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
cf13d8b6edd216267b941e910501f45a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cf13d8b6edd216267b941e910501f45a_JaffaCakes118
-
Size
25KB
-
MD5
cf13d8b6edd216267b941e910501f45a
-
SHA1
34d7bfab2309c8a070f445a87d4db6fd0666e861
-
SHA256
417061bc64fc2095ebc31b8ed0b4ab973b9ffdee0126cd2384d3b4b49e4e17f3
-
SHA512
f446835d637b27d932b7e98d96e7b8c49bf82efeef2dabb84bb3aa89885cf7023be921a95a7673007af1e1a848685fb6a22f9e3a7a841f3022eb0ca022a7884f
-
SSDEEP
384:DViW4KfMY42agrRCfMRZUrx0GMilpkosIudKd/L0EMYHpwGNTwda0n2HoFACVERl:DYW4uMvc9LrUrhfrkoOoL0cwG4nVg16k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf13d8b6edd216267b941e910501f45a_JaffaCakes118
Files
-
cf13d8b6edd216267b941e910501f45a_JaffaCakes118.exe windows:5 windows x86 arch:x86
0a39a110196186afc43ed00e2550396b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ActivateKeyboardLayout
DefWindowProcW
DestroyIcon
EndMenu
GetKeyNameTextW
DlgDirListW
DrawEdge
DrawIconEx
CascadeWindows
CheckRadioButton
CreateWindowExW
GetMessageW
GetMessageTime
GetPropW
GetScrollRange
UnhookWinEvent
VkKeyScanExW
ToAsciiEx
SetWindowLongW
SetTimer
gdi32
GetMapMode
GetMiterLimit
GetPixel
CreateCompatibleDC
CreatePalette
GetBkColor
GetBrushOrgEx
GetCharWidthW
GetClipBox
GdiFlush
GetDeviceCaps
GetFontData
EqualRgn
EndDoc
Escape
FillPath
FillRgn
GetRelAbs
SetBkColor
GetTextFaceW
kernel32
ExitProcess
InitAtomTable
CreateFileW
WriteFile
ReadFile
SetConsoleCP
GetModuleHandleW
VirtualProtect
Sections
.text Size: 76KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE