Static task
static1
Behavioral task
behavioral1
Sample
d292671a5f107cb61abde3b946194f0f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d292671a5f107cb61abde3b946194f0f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d292671a5f107cb61abde3b946194f0f_JaffaCakes118
-
Size
271KB
-
MD5
d292671a5f107cb61abde3b946194f0f
-
SHA1
d32adbde61470f2777ffa3793d2a6f46fe071563
-
SHA256
97b7e604500025dad77ce6ab3196bbd0b02f581fe4c6db3de23d40401281998d
-
SHA512
44e51f38ad69a3aa0315222c80ac05928fea2825fe413e2fe122d11bbb4bf7a3da54fcd395e406c5f3ef89f7d7dd368b3be08f737b671d08d6a9a47aa79aa6c3
-
SSDEEP
6144:CS+JNQNyBm6QPXMdFb8VuzT2IgrFmDkdXbjCYFZo:6NQNyEx8dFb9zSIg8DkrI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d292671a5f107cb61abde3b946194f0f_JaffaCakes118
Files
-
d292671a5f107cb61abde3b946194f0f_JaffaCakes118.exe windows:4 windows x86 arch:x86
525cb222adae2219446a351bae1aee4c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegCloseKey
RegCreateKeyA
RegOpenKeyW
RegSetValueExW
kernel32
CreateThread
ExitProcess
LeaveCriticalSection
SetUnhandledExceptionFilter
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
memcpy
memset
signal
strcpy
wcscpy
user32
CallNextHookEx
CallWindowProcW
CheckMenuItem
CheckMenuRadioItem
CopyRect
CreatePopupMenu
CreateWindowExW
DefFrameProcW
DestroyMenu
EndPaint
EnumWindows
GetClassNameW
GetClipboardData
GetClipboardFormatNameW
GetFocus
GetMessagePos
GetParent
GetWindowTextW
InvalidateRect
IsClipboardFormatAvailable
LoadCursorFromFileW
LoadIconW
PeekMessageW
PostMessageW
ScrollWindow
SendMessageW
SetCapture
SetCursor
SetWindowsHookExW
TrackPopupMenu
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 885KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ