Static task
static1
Behavioral task
behavioral1
Sample
cfbbe42692f8207d77b047d3aa8cb6cb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cfbbe42692f8207d77b047d3aa8cb6cb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cfbbe42692f8207d77b047d3aa8cb6cb_JaffaCakes118
-
Size
97KB
-
MD5
cfbbe42692f8207d77b047d3aa8cb6cb
-
SHA1
4476178b9cc8b3c4ea33c38b3b8dfdc00fd0bf50
-
SHA256
6d432f733b7740db63d5fb683d62277e82b43c19b953c84271ac79c57fadde83
-
SHA512
b040840383b13f6558bb48c5f33250ce431f719894a6016ab081575f8cc6acfdd68e8642d4f2bb461bc446a1eef2465fb2c755ae0c81a98c0904ee677b196c18
-
SSDEEP
1536:VSaeC19D9kvPHIJrlevSLzjXpRmPNWR58ubF1FKXAo++7qYLAhuk0:sa9XKHIFleuW+5HbFDNo++7yhuk0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfbbe42692f8207d77b047d3aa8cb6cb_JaffaCakes118
Files
-
cfbbe42692f8207d77b047d3aa8cb6cb_JaffaCakes118.exe windows:4 windows x86 arch:x86
9bd0e637c63d9849c31bc73354b175d6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
comdlg32
GetSaveFileNameA
comctl32
ImageList_GetBkColor
ImageList_Remove
ImageList_Destroy
ImageList_Draw
advapi32
RegEnumKeyExA
RegEnumKeyA
GetUserNameA
RegLoadKeyA
version
VerInstallFileA
VerQueryValueA
VerFindFileA
user32
GetClientRect
GetParent
GetDesktopWindow
MapVirtualKeyA
BeginPaint
DestroyMenu
EndPaint
MessageBeep
InsertMenuItemA
CallWindowProcA
GetSubMenu
KillTimer
DrawAnimatedRects
IsChild
LoadBitmapA
EnumChildWindows
DeleteMenu
WindowFromPoint
GetLastActivePopup
IsWindowVisible
ShowScrollBar
CreatePopupMenu
CharNextW
PostMessageA
RemovePropA
GetFocus
SetWindowPlacement
SetScrollInfo
SetScrollPos
EnumThreadWindows
ScrollWindow
SetClipboardData
GetMenuState
SetMenu
wsprintfA
OemToCharA
SetCapture
PostQuitMessage
DrawFrameControl
GetWindowTextA
FillRect
DrawMenuBar
GetKeyboardLayoutList
SendMessageW
GetMenuItemInfoA
GetForegroundWindow
CloseClipboard
GetClipboardData
SetWindowTextA
EnableWindow
RegisterWindowMessageA
GetKeyboardState
SetForegroundWindow
InvalidateRect
EqualRect
ReleaseCapture
GetKeyboardLayoutNameA
InsertMenuA
DrawIconEx
GetClassInfoA
SetRect
UpdateWindow
GetWindowLongA
ShowWindow
GetDlgItem
GetWindowPlacement
GetMenuStringA
CreateWindowExA
GetMenu
SetParent
MapWindowPoints
ole32
GetHGlobalFromStream
shell32
Shell_NotifyIconA
SHGetSpecialFolderLocation
SHGetDiskFreeSpaceA
SHGetFolderPathA
SHGetDesktopFolder
gdi32
CopyEnhMetaFileA
GetObjectA
GetDIBits
SaveDC
GetDIBColorTable
kernel32
GetLastError
GetVersionExA
LoadLibraryA
IsBadReadPtr
VirtualAllocEx
GetCommandLineA
lstrlenA
GetACP
GlobalAlloc
GetProcAddress
ExitThread
GetModuleHandleA
ExitProcess
Sections
.text Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 126KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC0 Size: 512B - Virtual size: 49B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC5 Size: 512B - Virtual size: 237B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC1 Size: 1024B - Virtual size: 815B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC8 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC4 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC2 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ