Static task
static1
Behavioral task
behavioral1
Sample
08f2a79c640baa95eedd6210541d1dc5_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
08f2a79c640baa95eedd6210541d1dc5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
08f2a79c640baa95eedd6210541d1dc5_JaffaCakes118
-
Size
76KB
-
MD5
08f2a79c640baa95eedd6210541d1dc5
-
SHA1
45b17f5ba30d9268c659aca60b020847b7ec2132
-
SHA256
ab73ec7dcd636610c62d022df70b19cecab32d8b36c897970ff80a39f2d6fe38
-
SHA512
5000e564783c5bbb1f94723d45d6902bbda7b8ff5266b5a07ddacaf5075e5bff053f24b8b0138d9fdd618717ddc1f51c832c013d1a3305e345bc7d9e3fe88ed2
-
SSDEEP
768:82rZEL6bD7iMYWgrasSjNhtQw4FddZpDK6oCXY6Loj:8XsD7iMYWg+jNhtQBZnoAa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08f2a79c640baa95eedd6210541d1dc5_JaffaCakes118
Files
-
08f2a79c640baa95eedd6210541d1dc5_JaffaCakes118.exe windows:4 windows x86 arch:x86
9e3d7bdd54b07c7c752be2f81900bb61
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceA
GetModuleHandleA
lstrcmpA
lstrcpynA
LoadResource
SetEndOfFile
SetFilePointer
CopyFileA
lstrcatA
lstrcpyA
CloseHandle
UnmapViewOfFile
MulDiv
CreateFileMappingA
FreeResource
LockResource
lstrlenA
WaitForSingleObject
SetEvent
FindClose
FindNextFileA
FindFirstFileA
SetThreadPriority
CreateThread
CreateEventA
MultiByteToWideChar
WideCharToMultiByte
GlobalFree
GlobalAlloc
GlobalLock
GetFileSize
CreateFileA
MapViewOfFile
GlobalUnlock
ExitProcess
GetVersion
GetProcAddress
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
HeapReAlloc
HeapFree
RtlUnwind
VirtualFree
WriteFile
HeapDestroy
GetFileType
HeapCreate
SetHandleCount
GetEnvironmentStringsW
GetStdHandle
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetEnvironmentStrings
UnhandledExceptionFilter
GetCurrentProcess
GetModuleFileNameA
GetStartupInfoA
GetCommandLineA
VirtualAlloc
GetOEMCP
TerminateProcess
HeapAlloc
GetCPInfo
GetACP
user32
GetDC
ReleaseDC
SetWindowPos
DialogBoxIndirectParamA
GetSystemMetrics
SetWindowTextA
GetParent
GetWindowRect
DefDlgProcA
SendMessageA
RegisterClassA
LoadIconA
LoadCursorA
IsDlgButtonChecked
CheckDlgButton
SetDlgItemInt
EndDialog
SetDlgItemTextA
GetDlgItem
EnableWindow
MessageBoxA
GetDlgItemTextA
gdi32
GetDeviceCaps
GetStockObject
GetObjectA
advapi32
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
shell32
SHBrowseForFolderA
SHGetMalloc
SHGetPathFromIDListA
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE