Static task
static1
Behavioral task
behavioral1
Sample
f67f1c3c49f7fe10eebd8a65df5ff228_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f67f1c3c49f7fe10eebd8a65df5ff228_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f67f1c3c49f7fe10eebd8a65df5ff228_JaffaCakes118
-
Size
44KB
-
MD5
f67f1c3c49f7fe10eebd8a65df5ff228
-
SHA1
1df1131d814883d16e79d43a8ab61610677ec15c
-
SHA256
43807c38d27896db071084f6ece076dde62b5f6a84ff54c158ed6465b7326ab4
-
SHA512
82346824977907f93052f29ea18ceafc209417372e254d10f75524ed3f964b448b50f95670597f3dbda7448a3691569445daea0dc8d6f822190e6ced6d8dcf79
-
SSDEEP
768:JHBxRyXhYrxQLErXKDt4+SCwF1KZ1Zghm4LHRVzirevrH0mRb/0WsnPX5msx/ZnG:n7XxQgrXKR4+S33GJ886vrH5b/0HPJd7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f67f1c3c49f7fe10eebd8a65df5ff228_JaffaCakes118
Files
-
f67f1c3c49f7fe10eebd8a65df5ff228_JaffaCakes118.exe windows:4 windows x86 arch:x86
2da5be64c5eb95e958a7c3c09eef8883
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DebugActiveProcess
EnumCalendarInfoExW
ExitProcess
GetConsoleTitleA
GetCurrentDirectoryW
GetCurrentThreadId
GetDefaultCommConfigW
GetDiskFreeSpaceExA
GetDiskFreeSpaceExW
GetMailslotInfo
GetPrivateProfileIntW
GetProcessWorkingSetSize
GetVersion
GlobalGetAtomNameA
Heap32ListFirst
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
_lcreat
_lwrite
lstrlenW
user32
ChangeMenuA
CheckRadioButton
ClipCursor
CloseDesktop
CloseWindowStation
CreateDialogParamA
DdeDisconnect
DrawIconEx
EndDialog
ExitWindowsEx
GetLastActivePopup
GetQueueStatus
GetUserObjectInformationW
IsCharAlphaW
IsDialogMessageW
IsWindowEnabled
LoadMenuA
NotifyWinEvent
SetUserObjectInformationA
SetWindowPlacement
TabbedTextOutW
UnregisterDeviceNotification
VkKeyScanExA
gdi32
AngleArc
AnimatePalette
CopyEnhMetaFileW
CreateDIBPatternBrush
CreateDiscardableBitmap
CreateEnhMetaFileA
CreatePolyPolygonRgn
DPtoLP
DeleteColorSpace
DrawEscape
EnumEnhMetaFile
EqualRgn
ExtTextOutA
ExtTextOutW
GetCharacterPlacementW
GetColorSpace
GetMapMode
GetStockObject
GetSystemPaletteUse
GetWinMetaFileBits
LineDDA
LineTo
OffsetWindowOrgEx
RectInRegion
SetBitmapBits
SetMagicColors
SetMiterLimit
SetTextAlign
SetViewportOrgEx
WidenPath
Sections
.text Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 42KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ