Static task
static1
Behavioral task
behavioral1
Sample
dbfba5cb0de98a5df89ba062256e3b0b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
dbfba5cb0de98a5df89ba062256e3b0b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dbfba5cb0de98a5df89ba062256e3b0b_JaffaCakes118
-
Size
250KB
-
MD5
dbfba5cb0de98a5df89ba062256e3b0b
-
SHA1
7ad22853a208ea246187a2e4d8beb1a533555abf
-
SHA256
4013816b0d4f19ea4e8ee746b99df0114b7f17445064778e872ef7aa3be93729
-
SHA512
1efeeb1f7eee2bb2b7017facf541695ad500a11ca96d7a9a8f03694dbdc2d27375e1403ca9ff8f5de6d45ef6c498c51358baad1c649b521da2a7aadee4a9ff1e
-
SSDEEP
3072:7Bmgw2QzZ3B1u4KNWf3Bz4BBqV9WktQTBf0o9LUMNR4mKWK+da73ZKNS0da:7MgdQzJu1AVoZ4QTB8w7KWvda7oS0da
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbfba5cb0de98a5df89ba062256e3b0b_JaffaCakes118
Files
-
dbfba5cb0de98a5df89ba062256e3b0b_JaffaCakes118.exe windows:4 windows x86 arch:x86
340ee852eaeae130f69ed67de52f3f6a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
sprintf
strcmp
strncmp
atof
strncpy
floor
ceil
memcpy
fread
_setjmp3
fclose
strlen
fmod
sin
cos
printf
abs
fabs
malloc
free
_snprintf
abort
_CIpow
__p__iob
fprintf
longjmp
strtod
memmove
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
FreeLibrary
MulDiv
HeapFree
HeapAlloc
SetLastError
InitializeCriticalSection
CloseHandle
GetCommandLineA
GlobalAlloc
GlobalFree
EnterCriticalSection
LeaveCriticalSection
TlsGetValue
TlsSetValue
TlsAlloc
HeapReAlloc
LoadLibraryA
GetProcAddress
GetVersionExA
WaitForMultipleObjects
GetCurrentThreadId
GetCurrentProcess
GetCurrentThread
DuplicateHandle
CreateSemaphoreA
CreateThread
ReleaseSemaphore
user32
SystemParametersInfoA
GetDC
ReleaseDC
GetWindowLongA
SetWindowLongA
UpdateLayeredWindow
GetWindow
SetActiveWindow
RemovePropA
SendMessageA
DestroyWindow
UnregisterClassA
DestroyAcceleratorTable
LoadIconA
LoadCursorA
RegisterClassA
AdjustWindowRectEx
GetSystemMetrics
GetActiveWindow
GetWindowRect
CreateWindowExA
SetPropA
ShowWindow
CreateAcceleratorTableA
SetWindowPos
SetTimer
IsZoomed
IsIconic
PeekMessageA
MsgWaitForMultipleObjects
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
SetCursorPos
LoadImageA
SetCursor
GetParent
MapWindowPoints
MoveWindow
GetKeyState
SetCapture
PostMessageA
GetCursorPos
ReleaseCapture
GetPropA
GetClientRect
FillRect
EnumChildWindows
DefFrameProcA
DefWindowProcA
IsWindowEnabled
IsWindowVisible
SetFocus
GetFocus
IsChild
GetClassNameA
CallWindowProcA
DestroyIcon
GetIconInfo
CreateIconFromResourceEx
CreateIconFromResource
DrawIconEx
gdi32
GetDeviceCaps
GetObjectA
CreateCompatibleDC
SelectObject
DeleteDC
DeleteObject
CreateDCA
CreateFontA
GetStockObject
GetObjectType
SetDIBits
CreateDIBSection
BitBlt
GdiSetBatchLimit
GdiGetBatchLimit
GetTextExtentPoint32A
SetBkMode
SetTextAlign
SetBkColor
SetTextColor
TextOutA
SetStretchBltMode
SetBrushOrgEx
StretchBlt
GetDIBits
GetPixel
CreateFontIndirectA
GetTextMetricsA
CreateCompatibleBitmap
CreateBitmap
SetPixel
comctl32
InitCommonControlsEx
ole32
RevokeDragDrop
Sections
.code Size: 1024B - Virtual size: 547B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ