Static task
static1
Behavioral task
behavioral1
Sample
07bfa319e8cd8ff475b60db24fb23dca_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
07bfa319e8cd8ff475b60db24fb23dca_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
07bfa319e8cd8ff475b60db24fb23dca_JaffaCakes118
-
Size
1.2MB
-
MD5
07bfa319e8cd8ff475b60db24fb23dca
-
SHA1
95896d4df77ea0b6a87cd9b21db2be98bdf1113a
-
SHA256
e950dccddd998a9b6217472a8ec9615922cdf7876211189d1291650c5e001798
-
SHA512
9023dd93089ad1fd5b0f9a828915561dc98a8231e0efeacd01b4159dde014a9f4a584ba833b46652fd240545e3323e2fa221208429174656632044f95469cde4
-
SSDEEP
24576:yA8un+X3wzL8TBsV6Ng4+/T2aJlL0xtWrLqmEeHeMMMMMMMMMMMMMMMMMMJFgiKR:yqIVuRTTJ6fFmcMMMMMMMMMMMMMMMMMJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07bfa319e8cd8ff475b60db24fb23dca_JaffaCakes118
Files
-
07bfa319e8cd8ff475b60db24fb23dca_JaffaCakes118.exe windows:4 windows x86 arch:x86
9b0221e9e5dd27417576d6248816d756
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenJobObjectA
LZClose
GetLogicalDriveStringsA
GetTempPathA
GetTickCount
GlobalFix
GetVolumePathNamesForVolumeNameA
CreateNamedPipeA
GetConsoleTitleA
CreateProcessA
OpenSemaphoreA
EndUpdateResourceA
GetTempFileNameA
DeviceIoControl
GetExitCodeProcess
ChangeTimerQueueTimer
GetPriorityClass
VirtualAllocEx
GetVolumePathNameA
GetConsoleOutputCP
GetNumberOfConsoleMouseButtons
RtlMoveMemory
EnumResourceNamesA
GetConsoleInputExeNameA
GetComputerNameA
OpenFileMappingA
HeapDestroy
SetVDMCurrentDirectories
CreateTimerQueue
IsDebuggerPresent
LocalAlloc
WaitForMultipleObjects
GetLastError
FormatMessageA
SetEvent
SetProcessPriorityBoost
GetProcessHeap
CopyFileExW
GetCurrentDirectoryA
dpmodemx
SPInit
advapi32
CredFree
user32
SystemParametersInfoA
UpdateLayeredWindow
FindWindowExW
GetClassNameA
MessageBeep
ToUnicode
DestroyWindow
GetWindow
SetWindowsHookExW
LoadLocalFonts
CharLowerA
GetInputDesktop
GetKeyState
MapVirtualKeyExA
GetMenuItemInfoA
CharToOemBuffA
DrawFrame
SetWindowStationUser
InflateRect
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 645KB - Virtual size: 1001KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 321KB - Virtual size: 321KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ