Static task
static1
Behavioral task
behavioral1
Sample
0df0f0cbf7c43408ae4a4e99dff0ff01_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0df0f0cbf7c43408ae4a4e99dff0ff01_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0df0f0cbf7c43408ae4a4e99dff0ff01_JaffaCakes118
-
Size
108KB
-
MD5
0df0f0cbf7c43408ae4a4e99dff0ff01
-
SHA1
04495626db09039acf4cd9feb44cf0a38625dbf3
-
SHA256
6c4a8e1cd1c739388fb4a93e09efa08f52d0b75225f8c2c1c80f7531a83c5407
-
SHA512
e7dcde6439dfb95ba79d376a7ccf32a44f3b0410f226a304e7dbb42e09c310731501400615417dd1eba54af781f6cccaf629b57e3cbca386e57bcadf93a79c6b
-
SSDEEP
1536:lnafqNVe//q2lwftiq6OVDziO0MeWxwled2sLzQlKgqU6VJdNJ4ug5/+5q4:K4Ado8FOB/0MNxqL4w2JdNJG54
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0df0f0cbf7c43408ae4a4e99dff0ff01_JaffaCakes118
Files
-
0df0f0cbf7c43408ae4a4e99dff0ff01_JaffaCakes118.exe windows:4 windows x86 arch:x86
26025c34f78c3f5995d57de30cf1d63b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
dinput
DirectInputCreateW
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
user32
GetCaretPos
BeginDeferWindowPos
UpdateWindow
ShowWindow
SetSystemCursor
RegisterClassA
PeekMessageA
OpenClipboard
MsgWaitForMultipleObjects
MessageBoxW
GetTopWindow
CharLowerBuffA
GetForegroundWindow
GetKeyState
EnumPropsA
EmptyClipboard
DispatchMessageA
DialogBoxParamA
DefWindowProcA
CreateWindowExA
ole32
IsEqualGUID
PropVariantClear
advapi32
FileEncryptionStatusA
SetUserFileEncryptionKey
SetSecurityDescriptorDacl
RegisterEventSourceA
RegQueryValueExA
OpenTraceW
LsaSetInformationTrustedDomain
LsaRemoveAccountRights
LookupPrivilegeNameW
I_ScSetServiceBitsA
GetSecurityDescriptorDacl
GetAclInformation
GetAce
AddAccessDeniedAce
shell32
ShellExecuteA
SHGetSpecialFolderPathW
SHFileOperationW
kernel32
GetTempPathW
GetSystemInfo
GetSystemDefaultLangID
GetStringTypeExA
GetPrivateProfileSectionW
GetTimeZoneInformation
GetFileAttributesExA
GetCurrentProcessId
GetConsoleOutputCP
GetConsoleAliasA
GetCommandLineA
GetBinaryTypeA
FormatMessageA
GetVersionExA
GetWindowsDirectoryA
GlobalAddAtomA
HeapAlloc
HeapCreate
MulDiv
OpenEventW
OpenJobObjectW
ReadFile
SetEnvironmentVariableA
SetFileTime
TlsGetValue
WaitForMultipleObjectsEx
lstrcmpA
GetModuleHandleA
FlushConsoleInputBuffer
FindNextVolumeW
FindAtomW
Beep
BindIoCompletionCallback
CloseHandle
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnumTimeFormatsA
ExitProcess
FindAtomA
Sections
.text Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ