Static task
static1
Behavioral task
behavioral1
Sample
ec725e6f7355c934e22abb9d81da7f65_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ec725e6f7355c934e22abb9d81da7f65_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ec725e6f7355c934e22abb9d81da7f65_JaffaCakes118
-
Size
217KB
-
MD5
ec725e6f7355c934e22abb9d81da7f65
-
SHA1
44048104c8413a20a550fb9cdab63a147da94137
-
SHA256
d0b02f2bc5e46880f67b31b7a7ab3fc8670ee3c6a0a362a52c2f10fbae8d1913
-
SHA512
cf7b80ad72f4325dff8e9a1d167a6f5a5ea9026dc3cdd372e23a97e16666f8a4640273858fbf86946891e89ae41ee9f7db7ccbb18a212ddf6115c2187d16755f
-
SSDEEP
6144:cqLPjb9UaJalcSMu9S7gWPdg+eBHQQl+7cxts/y:ckbu3cSruBPbeBbQwx+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec725e6f7355c934e22abb9d81da7f65_JaffaCakes118
Files
-
ec725e6f7355c934e22abb9d81da7f65_JaffaCakes118.exe windows:4 windows x86 arch:x86
a31533b82a1ae6755d1d83a6ec5dd0d0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetUnhandledExceptionFilter
GetTimeFormatA
GetProcAddress
LoadLibraryA
SetEvent
GetComputerNameA
GetFileType
RemoveDirectoryA
FileTimeToSystemTime
BeginUpdateResourceW
InitializeCriticalSection
GetTimeFormatW
user32
WaitForInputIdle
GetClassInfoExW
GetWindowRect
CopyImage
GetWindowRect
MoveWindow
GetMenuItemCount
LoadMenuIndirectW
GetAsyncKeyState
ClientToScreen
SetWindowTextA
SetDlgItemTextW
wsprintfW
GetForegroundWindow
OffsetRect
SetForegroundWindow
GetIconInfo
gdi32
GetTextMetricsW
GetGraphicsMode
FrameRgn
FloodFill
CreateDCW
GetKerningPairsA
CreateDCA
CopyEnhMetaFileA
CreatePolygonRgn
GetWorldTransform
ExtTextOutW
GetCharWidth32A
CreateDIBPatternBrushPt
EnumFontsW
OffsetClipRgn
GetGlyphOutlineA
CreateCompatibleDC
CreateFontA
PtInRegion
advapi32
RegDeleteKeyA
RegEnumValueW
RegCloseKey
RegDeleteValueA
RegOpenKeyW
RegFlushKey
RegReplaceKeyW
RegCreateKeyExW
RegQueryValueA
shlwapi
PathUndecorateA
PathSearchAndQualifyW
SHRegOpenUSKeyA
PathMatchSpecW
StrCmpNA
PathBuildRootA
PathStripToRootA
PathSetDlgItemPathW
PathRemoveBackslashA
comctl32
DllGetVersion
InitCommonControls
ImageList_SetImageCount
FlatSB_GetScrollInfo
oleaut32
VarMod
Sections
.mUiH Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Tuf Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bBa Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bme Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Q Size: 5KB - Virtual size: 353KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ndXuc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ