Static task
static1
Behavioral task
behavioral1
Sample
12d838132941ded8fe8b2be158ba979f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
12d838132941ded8fe8b2be158ba979f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
12d838132941ded8fe8b2be158ba979f_JaffaCakes118
-
Size
254KB
-
MD5
12d838132941ded8fe8b2be158ba979f
-
SHA1
7413813abd5062cf936dfe71c231de2e2beea82f
-
SHA256
5473e5e9633f8df4809046daf1df6f105934e3fb002c59d969b91035fb709e7a
-
SHA512
108409c047d5d58629ee5d8b7e035720d8488cd952ac07752b38a1fc38cda4bea3df378e08bc94faf57887dc442df32142534d9bd09cfb5d03f813aee28235c9
-
SSDEEP
6144:pH3zYrk1jpW+ygmKHYYSGlwt5T2Ep2CsGlv87WFUX2:erkjIBaZCsi0u82
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12d838132941ded8fe8b2be158ba979f_JaffaCakes118
Files
-
12d838132941ded8fe8b2be158ba979f_JaffaCakes118.exe windows:4 windows x86 arch:x86
db67fa64043427c5d5cb389200622efc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetVersionExA
GetProcessHeap
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleA
ExitProcess
TlsAlloc
GetLastError
Sleep
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
LoadLibraryA
InitializeCriticalSection
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetModuleHandleW
GetProcAddress
winipsec
CloseMMFilterHandle
GetMMAuthMethods
user32
GetForegroundWindow
LoadBitmapA
EnumClipboardFormats
RegisterClassA
GetMenuState
RemoveMenu
LoadCursorA
OffsetRect
CharUpperA
EmptyClipboard
AppendMenuA
UpdateLayeredWindow
GetIconInfo
GetDesktopWindow
SetWindowLongW
GetClassInfoW
LoadImageA
CreateDialogIndirectParamA
LoadMenuA
DestroyCursor
LoadIconW
GetKeyState
IsWindow
CharNextW
InsertMenuItemW
GetMessageA
SendMessageW
CopyRect
EnableWindow
PostQuitMessage
PostMessageW
gdi32
CreateFontW
RemoveFontResourceExW
CreateColorSpaceW
GetRasterizerCaps
CreateICW
UpdateICMRegKeyW
CreatePatternBrush
GetStockObject
TranslateCharsetInfo
CreatePalette
avifil32
AVIFileOpen
DllCanUnloadNow
AVIStreamBeginStreaming
AVIBuildFilter
AVISave
EditStreamSetNameW
AVISaveV
AVIStreamOpenFromFileA
Sections
CODE Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.cQk Size: 102KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 226KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iotuE Size: 112KB - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ