Static task
static1
Behavioral task
behavioral1
Sample
082711a1e2b927d6f85d0f19eca03984_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
082711a1e2b927d6f85d0f19eca03984_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
082711a1e2b927d6f85d0f19eca03984_JaffaCakes118
-
Size
763KB
-
MD5
082711a1e2b927d6f85d0f19eca03984
-
SHA1
7ef6e9a147ea6a0294b93f7e571b934d6c07704e
-
SHA256
aebc546870fe938e4d9ddd195471fa18e033be7365a054a263c261c26ea1060c
-
SHA512
ed272c3612d60e473bfa8a7a00b99bfbdd45476bf0a9735047c36022756fcc2e27036c44bd411c72c9b1f4a9ea4194e277316d7f8c4e743860e4ad46a339b08d
-
SSDEEP
12288:HVL2pCezU3NDHFHytljrDy4a1txPVcK7YMbFaQybeX2x8v9bMhZ/E9QG/5i8:kBkL1KtrO4GxNcWYMhLybu2+v9b4tG/d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 082711a1e2b927d6f85d0f19eca03984_JaffaCakes118
Files
-
082711a1e2b927d6f85d0f19eca03984_JaffaCakes118.exe windows:5 windows x86 arch:x86
76aadce2f2b999d38267eaba424d6e6d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteW
Shell_NotifyIconW
rpcrt4
RpcBindingFromStringBindingW
RpcStringFreeW
RpcImpersonateClient
RpcBindingFree
msvcrt
__set_app_type
ole32
WriteFmtUserTypeStg
comdlg32
GetOpenFileNameA
PrintDlgA
wininet
FtpSetCurrentDirectoryW
kernel32
lstrcmpiW
FindNextFileW
CloseHandle
GlobalAlloc
FindClose
GetModuleFileNameW
CreateEventW
SetLastError
GlobalLock
LoadResource
FlushFileBuffers
GetFullPathNameW
HeapAlloc
GetThreadLocale
GetStringTypeExW
FindResourceW
MulDiv
GlobalUnlock
GetFileAttributesW
HeapFree
WideCharToMultiByte
GetProcessHeap
LockResource
CopyFileW
lstrlenA
ResetEvent
FormatMessageW
Sleep
GetVersionExW
SetFilePointer
GetLastError
GetSystemInfo
SizeofResource
HeapReAlloc
DeleteFileW
CreateProcessW
GlobalFree
MoveFileW
GlobalSize
GetShortPathNameW
WriteFile
GetFileAttributesA
VirtualAlloc
lstrcpyA
ReadFile
lstrlenW
FindFirstFileW
GetUserDefaultLCID
WaitForSingleObject
user32
CopyRect
GetActiveWindow
GetClassNameW
SetDlgItemTextW
GetMenuStringW
SetFocus
IsDialogMessageW
DrawTextW
SetScrollRange
DeferWindowPos
CreateDialogParamW
IsWindowVisible
PostQuitMessage
EndPaint
GetCursorPos
ws2_32
WSAGetLastError
Sections
.data Size: 415KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 107KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE