Static task
static1
Behavioral task
behavioral1
Sample
f993eab70337be6bb9f58a85a87dd780_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f993eab70337be6bb9f58a85a87dd780_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f993eab70337be6bb9f58a85a87dd780_JaffaCakes118
-
Size
330KB
-
MD5
f993eab70337be6bb9f58a85a87dd780
-
SHA1
ac7316f2fccb02ed172e50d0b55da93cf4a44285
-
SHA256
dbf487cb28064ebfff0b5983822afc420132a16365b293ac760daa5e3a40f48c
-
SHA512
be6d7efe8465b94834715f3d1dc9c98293b16e0e8c15090a4d116371619a07d8d5861df33332ba58fd6599d15694598a55db8910b240da4e4aab4b9a8a078562
-
SSDEEP
3072:eWmSZ71w8XZ/G5xOXSsGE4gbg0c9C0xiZr0XuKhxepqgP3VyyEhy:epSrdGLI/4n0cnxiN0+KhfgPlyyE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f993eab70337be6bb9f58a85a87dd780_JaffaCakes118
Files
-
f993eab70337be6bb9f58a85a87dd780_JaffaCakes118.exe windows:4 windows x86 arch:x86
a922690097cd3b117abc7a90c8542369
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
CreateStatusWindowA
ImageList_DragShowNolock
ImageList_Draw
ImageList_Read
ImageList_Replace
ImageList_Write
InitCommonControls
PropertySheetW
ole32
CLSIDFromString
CoFreeUnusedLibraries
CoLoadLibrary
CreateILockBytesOnHGlobal
IsAccelerator
OleIsCurrentClipboard
ProgIDFromCLSID
user32
CallNextHookEx
CallWindowProcA
EmptyClipboard
EndDialog
EqualRect
FillRect
GetActiveWindow
GetMenuState
GetMenuStringA
GetScrollPos
GetTopWindow
InsertMenuItemA
IsChild
IsIconic
PostMessageA
PostQuitMessage
RemovePropA
SendDlgItemMessageA
SetCapture
SetClipboardData
SetRect
ShowOwnedPopups
shell32
CommandLineToArgvW
DoEnvironmentSubstW
DragFinish
ExtractIconW
FindExecutableW
SHAddToRecentDocs
SHFileOperationA
SHGetDesktopFolder
ShellExecuteEx
ShellExecuteExA
kernel32
GetExitCodeThread
GetFileSize
GetSystemDefaultLCID
GlobalReAlloc
HeapDestroy
LocalFileTimeToFileTime
MultiByteToWideChar
RtlUnwind
SetCurrentDirectoryA
VirtualAlloc
gdi32
Chord
CopyMetaFileA
CreateRoundRectRgn
ExtCreateRegion
ExtTextOutA
GetTextCharsetInfo
OffsetViewportOrgEx
PtVisible
RealizePalette
SelectClipRgn
advapi32
CopySid
CryptDestroyHash
CryptHashData
DeleteService
GetTokenInformation
OpenThreadToken
RegCloseKey
RegDeleteKeyA
RegEnumKeyW
RegEnumValueW
RegOpenKeyExA
Sections
.text Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE