Static task
static1
Behavioral task
behavioral1
Sample
07b8cd4cc13d3001d0f7127305ad85ab_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
07b8cd4cc13d3001d0f7127305ad85ab_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
07b8cd4cc13d3001d0f7127305ad85ab_JaffaCakes118
-
Size
105KB
-
MD5
07b8cd4cc13d3001d0f7127305ad85ab
-
SHA1
52e153da45da1882d69a4aab001e155872b7aaad
-
SHA256
02137f3cbf46062ac02f1b890d89a2ca051cc627fe0c7a50f9ea8b29d880a04b
-
SHA512
37583e84d88811cb1bc8543a9f9cde1327d20f7eed120c8a25b0239a8c6774786cec9c36dec96a610d8cf87518bc0a9e39fb5fd58ecae7f0a4e8f4a11b84a76f
-
SSDEEP
1536:yr7EGb0CEIG/lEcmfPxJTOKA9yF4h8UClPSOnqUpq1xAGC/9koY:yr7EGb0CC/lEcmfrjGyF4hdhOnPCxBH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07b8cd4cc13d3001d0f7127305ad85ab_JaffaCakes118
Files
-
07b8cd4cc13d3001d0f7127305ad85ab_JaffaCakes118.exe windows:4 windows x86 arch:x86
e4e3f670e02de472fb8d631eeb6881d5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memmove
memcmp
log10
kernel32
GetProcAddress
GlobalAddAtomA
GetStringTypeW
GetACP
VirtualAlloc
HeapAlloc
GetModuleHandleA
FreeLibrary
lstrcmpiA
ExitProcess
LoadLibraryExA
shell32
DragQueryFileA
oleaut32
VariantCopyInd
SafeArrayPtrOfIndex
SysStringLen
gdi32
GetCurrentPositionEx
user32
PeekMessageW
ShowOwnedPopups
TranslateMessage
RemoveMenu
EqualRect
CheckMenuItem
InsertMenuItemA
SetWindowLongA
GetClassNameA
RegisterClipboardFormatA
GetKeyboardLayoutList
IsDialogMessageA
SetClipboardData
UpdateWindow
FrameRect
SetCursor
EmptyClipboard
SetScrollInfo
IsIconic
EnumChildWindows
GetCapture
GetKeyboardType
GetSysColor
MoveWindow
ReleaseCapture
LoadStringA
GetMenuItemCount
FindWindowA
MsgWaitForMultipleObjects
EnumThreadWindows
DefMDIChildProcA
TranslateMDISysAccel
GetWindowPlacement
PeekMessageA
CharNextA
CharUpperBuffA
TrackPopupMenu
GetTopWindow
DefWindowProcA
GetDC
ShowScrollBar
DrawIcon
RegisterWindowMessageA
GetClassInfoA
GetIconInfo
DispatchMessageA
SendMessageW
GetWindowLongW
CharToOemA
GetClipboardData
GetFocus
InsertMenuA
IsZoomed
OffsetRect
GetMenuItemID
EnableScrollBar
CreatePopupMenu
wsprintfA
IsRectEmpty
RemovePropA
ScrollWindow
GetMenu
SetForegroundWindow
IsWindowVisible
WindowFromPoint
SendMessageA
GetPropA
DrawTextA
IsDialogMessageW
SetScrollRange
GetSystemMetrics
LoadKeyboardLayoutA
RedrawWindow
SetWindowsHookExA
LoadIconA
EnableMenuItem
UnhookWindowsHookEx
GetSubMenu
EndPaint
UnregisterClassA
GetCursor
MapWindowPoints
MapVirtualKeyA
SetClassLongA
GetParent
SetWindowPos
ChildWindowFromPoint
CallNextHookEx
GetMenuState
GetLastActivePopup
GetMessagePos
GetActiveWindow
DeleteMenu
GetDCEx
DestroyWindow
IsWindow
ClientToScreen
SetMenu
DrawAnimatedRects
SetCapture
SetWindowPlacement
GetScrollInfo
GetWindowTextA
GetSystemMenu
GetScrollPos
GetClassLongA
EnableWindow
SetRect
SetPropA
SetActiveWindow
GetForegroundWindow
comdlg32
ChooseColorA
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
FindTextA
shlwapi
PathGetCharTypeA
SHQueryValueExA
SHDeleteKeyA
SHStrDupA
advapi32
GetUserNameA
RegQueryValueA
RegOpenKeyA
version
VerQueryValueA
GetFileVersionInfoSizeA
comctl32
ImageList_Remove
ImageList_DrawEx
ImageList_Draw
ole32
CoDisconnectObject
OleRegGetUserType
CoGetContextToken
MkParseDisplayName
CoTaskMemFree
CoReleaseMarshalData
CoGetObjectContext
CoUninitialize
ReleaseStgMedium
CoCreateGuid
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: 512B - Virtual size: 402B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE