Static task
static1
Behavioral task
behavioral1
Sample
db978f9233b4b18aedc2df4124af2ec9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db978f9233b4b18aedc2df4124af2ec9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
db978f9233b4b18aedc2df4124af2ec9_JaffaCakes118
-
Size
281KB
-
MD5
db978f9233b4b18aedc2df4124af2ec9
-
SHA1
cf0e5076473968f766cef680c7d589f366f98ceb
-
SHA256
ae092d68589805a183e25e18d4526a7af470450288ef1cbd8e79dbe73e5cd7c9
-
SHA512
0db528483af4cae8821559fb63857089fe964a4b1aa0bfc76e04be7d13881df3af7726f7fb60d3c8dd44d501ea85c1b810925ae7945a123474338468731e4923
-
SSDEEP
6144:uW6WARfYrwojdgycjGWtJTvyrRYZ5CHgIU7UPmqKuPOZrjP8SiAJGdQqwk:uWLARywo6ZjF/qr0mdPbsjP8Hh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db978f9233b4b18aedc2df4124af2ec9_JaffaCakes118
Files
-
db978f9233b4b18aedc2df4124af2ec9_JaffaCakes118.exe windows:4 windows x86 arch:x86
8c78acb61affe3ff21dbc813f6106435
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
FileTimeToSystemTime
LoadResource
SetFilePointer
ExitProcess
FreeLibrary
GetProcessHeap
HeapAlloc
WaitForSingleObject
HeapSize
IsBadReadPtr
LoadLibraryA
VirtualAlloc
VirtualFree
VirtualProtect
FreeResource
SetWaitableTimer
FindResourceW
FindFirstFileW
FindResourceExW
GetTickCount
GetSystemTime
ResetEvent
GlobalAlloc
CreateEventW
DuplicateHandle
WriteFile
GlobalDeleteAtom
InterlockedDecrement
GetDriveTypeW
GetProcAddress
HeapFree
user32
RegisterWindowMessageW
SetWindowTextW
CreateWindowExW
IsWindow
GetDlgItem
LoadStringW
RegisterClassExW
PostMessageW
FillRect
UpdateWindow
LoadBitmapW
SetCapture
GetSysColor
LoadCursorW
SendDlgItemMessageW
gdi32
CreateFontIndirectW
CreateRoundRectRgn
CreateSolidBrush
CreateCompatibleDC
GetDeviceCaps
Rectangle
LineTo
CreateICW
CreateCompatibleBitmap
BitBlt
MoveToEx
SelectObject
GetObjectW
advapi32
RegSetValueExW
GetUserNameW
Sections
.text Size: 248KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE