Static task
static1
Behavioral task
behavioral1
Sample
17925e3120447e7d014f557b1aff5565_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
17925e3120447e7d014f557b1aff5565_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
17925e3120447e7d014f557b1aff5565_JaffaCakes118
-
Size
176KB
-
MD5
17925e3120447e7d014f557b1aff5565
-
SHA1
7a1efafb49830a4d8e4b1e47d92f46bfcd929e4a
-
SHA256
77b99275207d207028ed979b1444e222c3dd64d67971451a54da0b0974aaa850
-
SHA512
9795b14328be0007079c7c9678f3b43bd5a042090493512b281742a29e2d214ab08fe542053ed949834846ebf8e6679dd421ae0d7253d2330ea49cb49b77492c
-
SSDEEP
3072:GhAN64GO5JLQn/z2GtvymFLMcgIBqKROA3M4k3lq1n8I:GsJLQn/z2GRzdqYfd58I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17925e3120447e7d014f557b1aff5565_JaffaCakes118
Files
-
17925e3120447e7d014f557b1aff5565_JaffaCakes118.exe windows:4 windows x86 arch:x86
fcc01970db991c21c6c257f4dc0bfffd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
ord8
StrStrA
shell32
ord182
SHPathPrepareForWriteA
SHGetFolderPathAndSubDirW
gdi32
ExtTextOutA
SetWinMetaFileBits
GetCharWidthFloatA
ColorMatchToTarget
comctl32
CreateToolbarEx
kernel32
LocalSize
RtlCaptureContext
CopyFileExW
LoadLibraryA
GetModuleHandleA
GetProcAddress
Sleep
WriteFile
LocalFree
GetShortPathNameW
GetSystemTimeAsFileTime
MultiByteToWideChar
GetDriveTypeA
IsValidLocale
GetTimeFormatW
HeapCompact
IsBadWritePtr
lstrcpynW
GlobalAlloc
OpenEventW
VirtualUnlock
GetTickCount
GetStartupInfoA
user32
ShowOwnedPopups
ScrollDC
GetWindowContextHelpId
SetWinEventHook
DestroyIcon
IsCharLowerW
GetDC
UnregisterDeviceNotification
CheckMenuItem
InsertMenuItemA
CreateCursor
ArrangeIconicWindows
GetRegisteredRawInputDevices
SetTimer
GetSysColorBrush
msvcrt
exit
bsearch
iswcntrl
wcstombs
fputwc
ftell
vswprintf
sscanf
asctime
memcpy
vsprintf
isxdigit
isalnum
_c_exit
_exit
_XcptFilter
_cexit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
malloc
memmove
memset
fgets
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 134KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE