Static task
static1
Behavioral task
behavioral1
Sample
d995014c25fce399019e643daa799c91_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d995014c25fce399019e643daa799c91_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
d995014c25fce399019e643daa799c91_JaffaCakes118
-
Size
403KB
-
MD5
d995014c25fce399019e643daa799c91
-
SHA1
8135ab67a00597e21edaa3d4758b08c018a3c932
-
SHA256
e67c70d376e994267926e669865f20090cc4c375e96b8c0cf78cc8b9b3f80b6f
-
SHA512
b4f0a227cb290e40287d8c91f5f9bab950d5311935aeb3e05640a3adb7e48e812d17bac1a7039dfc289ee5ed80fbe35c8423056212cb43510055cf3631fa2fa6
-
SSDEEP
12288:e4KCtSaFBw7u2cQsj/BFf25hBEfWkSDBAG0TXqxnG:7KOSaTw7u2cQsB4vBgRm5G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d995014c25fce399019e643daa799c91_JaffaCakes118
Files
-
d995014c25fce399019e643daa799c91_JaffaCakes118.exe windows:4 windows x86 arch:x86
b690e352d76335ce514a77dc4b133437
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClientRect
SendDlgItemMessageA
FindWindowA
SetForegroundWindow
SetDlgItemInt
ArrangeIconicWindows
IsWindow
CloseWindow
IsZoomed
SetSysColors
GetLastActivePopup
ole32
CLSIDFromProgID
oleaut32
LHashValOfNameSysA
gdi32
Arc
CloseEnhMetaFile
CopyEnhMetaFileW
BitBlt
CreateEllipticRgn
AbortDoc
CreateDCW
AddFontResourceA
CreateDCA
CreateCompatibleDC
advapi32
RegLoadKeyA
RegEnumKeyExA
RegConnectRegistryA
RegQueryValueA
RegSaveKeyA
RegDeleteValueA
kernel32
GetModuleHandleA
GetStartupInfoA
VirtualAlloc
GetStdHandle
GetProcAddress
WriteProfileSectionA
GetPrivateProfileStringA
GetPrivateProfileSectionA
GetProfileStringA
msvcrt
exit
_XcptFilter
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_exit
_acmdln
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 126KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 278KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ