Static task
static1
Behavioral task
behavioral1
Sample
cfb8b95785b67c9b54be21add1ae1e44_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cfb8b95785b67c9b54be21add1ae1e44_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cfb8b95785b67c9b54be21add1ae1e44_JaffaCakes118
-
Size
241KB
-
MD5
cfb8b95785b67c9b54be21add1ae1e44
-
SHA1
8c8492f60a65688311408fa48a9b734ae0f5b123
-
SHA256
878d00ccfc3f3d0112daa9fabac1c23aee3d2beb4e11fe3f0bafc57abd1d3fa3
-
SHA512
34eabdff03ab725f2239c4ceb37c10bde9e3d2e077dc0834c36ad148e093a5cafdc9c0ee74149c4cb431b38e38d280c5fee7cb9ccae142cdbff01481bb42ba3c
-
SSDEEP
6144:G5LtD/gtVE7/nKiZ3SPWKd4eD8d8royMdG4vi7bHumr:6+tVEznKi0Wmed8royMy3um
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfb8b95785b67c9b54be21add1ae1e44_JaffaCakes118
Files
-
cfb8b95785b67c9b54be21add1ae1e44_JaffaCakes118.exe windows:4 windows x86 arch:x86
60a0dc27ba33fc6b9260e34aae7eefad
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDefaultLCID
HeapDestroy
HeapCreate
ExpungeConsoleCommandHistoryW
VirtualFree
GetModuleFileNameA
TerminateProcess
UnhandledExceptionFilter
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
HeapReAlloc
GetTimeZoneInformation
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateFileA
gdi32
GetTextColor
GetBkColor
GetMapMode
GetTextExtentPoint32W
CreateFontIndirectW
CreateSolidBrush
GetStockObject
CreatePatternBrush
DeleteDC
user32
SendDlgItemMessageW
IsDialogMessageW
SetWindowTextW
MoveWindow
GetWindowRect
GetWindowPlacement
SystemParametersInfoA
CallWindowProcW
DefWindowProcW
PtInRect
DeferWindowPos
ScreenToClient
RegisterClassW
GetClassInfoExW
CreateWindowExW
MessageBoxW
GetClientRect
SetForegroundWindow
TrackPopupMenu
MapWindowPoints
GetMessagePos
GetMessageTime
UnhookWindowsHookEx
DestroyWindow
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
DispatchMessageW
GetForegroundWindow
winspool.drv
DocumentPropertiesW
OpenPrinterW
ClosePrinter
shlwapi
PathIsUNCW
PathStripToRootW
PathFindFileNameW
PathFindExtensionW
PathCombineW
shell32
SHGetFolderPathW
DragQueryFileW
DragFinish
CommandLineToArgvW
SHFileOperationW
oleaut32
DispGetIDsOfNames
DispGetIDsOfNames
SafeArrayPutElement
CreateErrorInfo
SafeArrayAllocDescriptorEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString
comdlg32
GetFileTitleW
oledlg
OleUIBusyW
Sections
.text Size: 139KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE