Static task
static1
Behavioral task
behavioral1
Sample
f5084b2e9fcd77df83516d02ee9ead9b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f5084b2e9fcd77df83516d02ee9ead9b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f5084b2e9fcd77df83516d02ee9ead9b_JaffaCakes118
-
Size
83KB
-
MD5
f5084b2e9fcd77df83516d02ee9ead9b
-
SHA1
ea43f9bd0abd13d29ede284d51d466dc5bab7ac0
-
SHA256
42f3ad6188812498ecf1faa4c88de9232e309e928241ae0cc19476127c22b6f9
-
SHA512
1b29d5b2d1a4b747a5103b2f8fa49d7f5119a949be415c29fdafd6f3d7e03bba15ecc8ce841c8d4bc8743f44a6563c42f9c87e399adcda1eaf318887ac163cb8
-
SSDEEP
1536:NRSJIlb/u3F1ErDMpoGLlWrx1XStibvD/r9TNwMbWAVnb2rxmk+VjgC:nSGlbCF1Ero2GIF1i8X/JRVKAhcx+r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5084b2e9fcd77df83516d02ee9ead9b_JaffaCakes118
Files
-
f5084b2e9fcd77df83516d02ee9ead9b_JaffaCakes118.exe windows:5 windows x86 arch:x86
46a81a84c6bb2c0a25fa3341c8ffe112
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
GetScrollPos
FrameRect
SetWindowPos
GetMessageA
EqualRect
GetSysColorBrush
UnhookWindowsHookEx
PostQuitMessage
EnableMenuItem
SetWindowTextA
GetSubMenu
GetSysColor
EnumWindows
kernel32
ExitProcess
RtlUnwind
VirtualAllocEx
QueryPerformanceCounter
InterlockedExchange
GetTempPathA
GetTimeZoneInformation
GetStartupInfoA
GetSystemTime
GetFileAttributesA
GetCurrentProcessId
SetUnhandledExceptionFilter
GetThreadLocale
FileTimeToSystemTime
gdi32
FillRgn
SetViewportExtEx
CopyEnhMetaFileA
CreateCompatibleBitmap
GetMapMode
ExcludeClipRect
CreateICW
SelectClipPath
DPtoLP
ole32
StringFromGUID2
StgOpenStorage
CoInitialize
CoTaskMemRealloc
OleRun
CoInitializeSecurity
DoDragDrop
CoRevokeClassObject
CoCreateInstance
advapi32
AdjustTokenPrivileges
FreeSid
GetUserNameA
RegQueryValueExW
QueryServiceStatus
CryptHashData
CheckTokenMembership
GetSecurityDescriptorDacl
RegCreateKeyExW
RegCreateKeyA
msvcrt
fprintf
puts
_flsbuf
_lock
_CIpow
strncpy
__initenv
__setusermatherr
fflush
strlen
_mbscmp
_fdopen
iswspace
__getmainargs
_strdup
raise
strcspn
signal
comctl32
ImageList_DragEnter
ImageList_SetIconSize
ImageList_LoadImageA
ImageList_Destroy
ImageList_GetIconSize
ImageList_LoadImageW
ImageList_Write
ImageList_GetBkColor
InitCommonControls
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_DrawEx
CreatePropertySheetPageA
shell32
ShellExecuteEx
ExtractIconW
SHGetPathFromIDList
SHBrowseForFolderA
DragAcceptFiles
DragQueryFileW
ShellExecuteW
CommandLineToArgvW
DoEnvironmentSubstW
DragQueryFileA
ExtractIconExW
oleaut32
SafeArrayPutElement
SafeArrayCreate
SafeArrayPtrOfIndex
VariantCopy
SafeArrayGetUBound
SafeArrayRedim
SysReAllocStringLen
SafeArrayUnaccessData
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ