Static task
static1
Behavioral task
behavioral1
Sample
cf28413ef1d8817d9bb5f471b9ee622e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cf28413ef1d8817d9bb5f471b9ee622e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cf28413ef1d8817d9bb5f471b9ee622e_JaffaCakes118
-
Size
637KB
-
MD5
cf28413ef1d8817d9bb5f471b9ee622e
-
SHA1
5a1c50c22d9a9167ca7d87639aa4192b69e3e985
-
SHA256
2cccd94bf64ea1b49f7c89eafb49d75b15a38fa40c1c1177abf4409c842ff700
-
SHA512
83affe707f1606e28b56598852c8e05a6a0e134dd8166231acacd70e81ee8446397f350935f13e2b1bb87bf17d5c5190d3d4e30fb733c76faed9558b1cb3cde4
-
SSDEEP
12288:HMiCFdcQ4wIU6MEZlQI0PsdFui/oyID6KVzU4ANdA6hQxV+2SieaG3RnMIN:HMii63MED2s+i/JIZVzkhu3exRnV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf28413ef1d8817d9bb5f471b9ee622e_JaffaCakes118
Files
-
cf28413ef1d8817d9bb5f471b9ee622e_JaffaCakes118.exe windows:4 windows x86 arch:x86
5db243773b71af6b9a0840c3984d77c8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
lstrlenA
GetSystemDefaultLangID
GlobalUnlock
GetVersion
CompareFileTime
CloseHandle
HeapReAlloc
GetTickCount
GetCommandLineA
SetConsoleCP
HeapCreate
GetConsoleCP
GetStdHandle
LoadLibraryExA
WaitForMultipleObjects
WaitForSingleObject
GetAtomNameA
InterlockedExchange
GetModuleHandleA
SuspendThread
user32
DispatchMessageA
GetKeyState
CreateIcon
SetWindowPos
FindWindowA
InvertRect
SetPropA
InsertMenuA
DrawCaption
FillRect
EnableScrollBar
GetDlgItem
GetKeyboardLayout
DragObject
IsDialogMessage
GetCursorInfo
SetScrollInfo
CreateMenu
CopyImage
DialogBoxParamA
DestroyMenu
advapi32
RegEnumKeyA
RegCloseKey
RegCreateKeyExA
RegEnumValueA
RegQueryInfoKeyA
apphelp
ApphelpCheckExe
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ