Static task
static1
Behavioral task
behavioral1
Sample
07f65ea6cff56e91d87fe4ad40956ad3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
07f65ea6cff56e91d87fe4ad40956ad3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
07f65ea6cff56e91d87fe4ad40956ad3_JaffaCakes118
-
Size
88KB
-
MD5
07f65ea6cff56e91d87fe4ad40956ad3
-
SHA1
e57c1277ffe422ea4f9e0254c894edb4bb5f17ff
-
SHA256
6684adc696502064627c8d50f90c4a3823f94dd21a7e3cdeff4ce70afd5757d8
-
SHA512
bcd49fffd522d9176237abec75668eb65bde0224971139c4d769d4edfcd32b584576e477ccfea2eb74e33c4b7e12661666860505114a803a77e4671b2ccad2e6
-
SSDEEP
1536:KLfHnvha4XDKuxQg7H56d/wLYmild1euV/0hElH8hRvtBT1wB:KLvvha4XDfrZuoYvldsuVsElchNDKB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07f65ea6cff56e91d87fe4ad40956ad3_JaffaCakes118
Files
-
07f65ea6cff56e91d87fe4ad40956ad3_JaffaCakes118.exe windows:4 windows x86 arch:x86
83e0944dde02996b4fa28726519f0bac
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
ChooseColorW
ChooseFontW
CommDlgExtendedError
FindTextA
GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA
PrintDlgA
PrintDlgExA
PrintDlgW
dwLBSubclass
dwOKSubclass
user32
GetScrollInfo
GetSubMenu
GetUserObjectSecurity
GetWindowRect
LoadAcceleratorsA
MoveWindow
RemoveMenu
SendMessageTimeoutA
SetClassLongA
SetPropA
SetTimer
SetWindowLongA
kernel32
GetUserDefaultLangID
GetStartupInfoA
GetOEMCP
GetModuleHandleA
GetLogicalDrives
GetComputerNameA
GetCommandLineA
GetACP
FindResourceExW
FindFirstChangeNotificationA
FatalAppExitW
ExitProcess
EnumSystemLanguageGroupsA
lstrcmpiW
WritePrivateProfileStructA
WaitNamedPipeW
VirtualProtect
TerminateJobObject
RtlFillMemory
PulseEvent
OpenMutexA
HeapCreate
HeapAlloc
GlobalUnfix
GetVersionExA
CloseHandle
EnumResourceNamesW
GetUserDefaultLCID
ole32
CoCreateInstance
dbghelp
SymMatchFileName
FindFileInPath
GetTimestampForLoadedLibrary
MiniDumpReadDumpStream
MiniDumpWriteDump
SymEnumSourceFiles
SymEnumerateSymbolsW
SymGetLinePrev
SymGetModuleInfoW64
SymGetSymPrev64
SymLoadModule64
comctl32
CreateUpDownControl
FlatSB_GetScrollProp
FlatSB_GetScrollRange
ImageList_DrawIndirect
ImageList_LoadImageA
ImageList_Read
ImageList_ReplaceIcon
ImageList_SetOverlayImage
InitCommonControlsEx
InitMUILanguage
InitializeFlatSB
CreateStatusWindowW
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ