Static task
static1
Behavioral task
behavioral1
Sample
003a9ea69305154adedd759fa841d689_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
003a9ea69305154adedd759fa841d689_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
003a9ea69305154adedd759fa841d689_JaffaCakes118
-
Size
91KB
-
MD5
003a9ea69305154adedd759fa841d689
-
SHA1
e8acde9629dbe71d375fa987051215a9644030a1
-
SHA256
c4188aa7a9960788b30ff83b55558193d6cdfae888bda776a8661b1d75415d57
-
SHA512
00ed9cee990157b033898b88674f8335aad56ccde8a0de61fb8d310fc53a50b387979e02d0fedf94844da43a1aa97917c83df7098a910641a1436dbe5fc79c44
-
SSDEEP
1536:TTe9PslGjDkxBYXPAyjkYy4vopp+TjfdQLh:/APslGjDkxBYXPAyjzvoppCfal
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 003a9ea69305154adedd759fa841d689_JaffaCakes118
Files
-
003a9ea69305154adedd759fa841d689_JaffaCakes118.exe windows:4 windows x86 arch:x86
042637850a3034529b8820692981de0e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntA
kernel32
ExitProcess
FreeLibrary
LoadLibraryExA
GetPrivateProfileIntA
CloseHandle
SetFilePointer
CreateFileA
GetVolumeInformationA
ReadFile
GetDriveTypeA
GetLogicalDrives
GetTickCount
lstrcpyA
lstrcatA
GetModuleFileNameA
GetModuleHandleA
GetEnvironmentVariableA
GetPrivateProfileStringA
lstrcmpiA
lstrlenA
lstrcmpA
SetErrorMode
user32
SetForegroundWindow
GetAsyncKeyState
SendMessageA
GetWindowTextW
FindWindowA
DispatchMessageA
GetMessageA
MessageBoxA
CreateWindowExA
RegisterClassA
RegisterWindowMessageA
CharNextA
CharNextW
CreatePopupMenu
GetCursorPos
InsertMenuItemA
SetMenuDefaultItem
TrackPopupMenu
DestroyMenu
LoadImageA
DestroyIcon
DefWindowProcA
DestroyWindow
PostQuitMessage
SetTimer
wsprintfA
EnableMenuItem
advapi32
RegCloseKey
RegQueryValueExA
RegDeleteValueA
RegCreateKeyA
RegSetValueExA
RegOpenKeyA
shell32
ShellExecuteA
SHGetSpecialFolderPathA
Shell_NotifyIconW
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE