Static task
static1
Behavioral task
behavioral1
Sample
03b9b86e7a1126f836fcf6601f4e2f14_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
03b9b86e7a1126f836fcf6601f4e2f14_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
03b9b86e7a1126f836fcf6601f4e2f14_JaffaCakes118
-
Size
244KB
-
MD5
03b9b86e7a1126f836fcf6601f4e2f14
-
SHA1
c61ea054ab10bd3a6d978023976a3dbb794dff75
-
SHA256
d8f85ba5d8738eb1bc89b48b04636ad87e3ea0a72779f1794ffcd9b5dc62f0e4
-
SHA512
76a476d6e72bd367f8490abf64450947484e8358cfa318d214adcba9a0e421bc4631a2a7b88f30c66dd2e68b5a0cd64a2a0d88fd6143a2f31dbfab8994e2be46
-
SSDEEP
6144:zOUj+bBvkSHQeZdz+654mECvf9pd7ngyqhY:zOUj+bBDHLZdK6amECNVcY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03b9b86e7a1126f836fcf6601f4e2f14_JaffaCakes118
Files
-
03b9b86e7a1126f836fcf6601f4e2f14_JaffaCakes118.exe windows:4 windows x86 arch:x86
5eaf29cc37afb1fa36093dd85e68f46c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LocalAlloc
lstrcmpiA
SetFilePointer
RaiseException
ExitProcess
lstrcatA
lstrlenA
SizeofResource
IsBadReadPtr
ExitThread
lstrcpyA
MulDiv
GetVersionExA
LocalReAlloc
GetModuleHandleA
VirtualAlloc
IsBadHugeReadPtr
WriteFile
LoadLibraryExA
GetCommandLineA
GetProcAddress
SetHandleCount
VirtualFree
LoadLibraryA
SetLastError
VirtualQuery
WideCharToMultiByte
MoveFileA
SetThreadLocale
GetCommandLineW
SetErrorMode
lstrcmpA
LocalFree
gdi32
CreateDIBitmap
CopyEnhMetaFileA
SaveDC
CreateBitmap
GetDIBColorTable
SetPixel
BitBlt
user32
SendMessageA
SetPropA
GetClientRect
CharLowerBuffA
WindowFromPoint
RemoveMenu
FrameRect
CreatePopupMenu
MoveWindow
GetFocus
GetMenuItemCount
GetScrollRange
CharNextA
SetForegroundWindow
InvalidateRect
GetClassNameA
InsertMenuA
CharUpperBuffA
SetWindowsHookExA
GetMenuItemInfoA
TranslateMDISysAccel
ReleaseCapture
CharLowerA
GetScrollInfo
GetMenuStringA
GetMenuState
GetForegroundWindow
IsChild
EnumWindows
DefWindowProcA
DrawTextA
GetMessagePos
GetWindowLongA
GetClipboardData
GetCursor
DrawMenuBar
DrawIcon
DrawFrameControl
PostMessageA
IsWindowUnicode
DrawEdge
GetIconInfo
ShowWindow
GetKeyboardLayout
SetMenu
SetWindowTextA
IntersectRect
SetWindowLongA
GetWindowRect
ScrollWindow
IsDialogMessageW
SetScrollInfo
GetWindowDC
GetKeyboardState
GetWindow
GetMenuItemID
IsIconic
EnumChildWindows
wsprintfA
GetKeyState
IsWindowVisible
IsRectEmpty
IsZoomed
GetKeyboardType
DestroyWindow
MapWindowPoints
GetSysColor
GetSystemMetrics
GetDesktopWindow
DrawIconEx
EnableMenuItem
EndPaint
GetParent
DestroyIcon
OffsetRect
GetTopWindow
GetMenu
TranslateMessage
RemovePropA
IsWindowEnabled
CreateMenu
EnableScrollBar
PeekMessageA
RegisterClipboardFormatA
DeleteMenu
ReleaseDC
GetScrollPos
GetWindowThreadProcessId
GetWindowLongW
GetSysColorBrush
EqualRect
Sections
CODE Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 157KB - Virtual size: 157KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES72 Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES77 Size: 1024B - Virtual size: 533B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES43 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES99 Size: 512B - Virtual size: 119B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES16 Size: 512B - Virtual size: 109B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES23 Size: 512B - Virtual size: 139B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES11 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES89 Size: 1024B - Virtual size: 791B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ