Static task
static1
Behavioral task
behavioral1
Sample
1808adcf3e34b02995205e57eb113f43_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1808adcf3e34b02995205e57eb113f43_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1808adcf3e34b02995205e57eb113f43_JaffaCakes118
-
Size
144KB
-
MD5
1808adcf3e34b02995205e57eb113f43
-
SHA1
af416fd927b97dfadf37f31220cc34e560746d8d
-
SHA256
db475d6c8667d839a172991f2d20a96a2450d5dcb005a07800f7d22f940cedae
-
SHA512
a22982ac2f7dff858c7f730e7777a37c6251093f66f6815e4a90c70d77f15eb4d8e34ed08ced3c77b6d74fddfa5a07e1aec3de9612e720a8ef281639f6563dea
-
SSDEEP
3072:q+EtNeC+jOc2NFbFaQNOC+WxppdSV6bdH:RE3c2NF5aF/W3SVQH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1808adcf3e34b02995205e57eb113f43_JaffaCakes118
Files
-
1808adcf3e34b02995205e57eb113f43_JaffaCakes118.exe windows:4 windows x86 arch:x86
f5972c849eeb3d082cc96d93f3f41f3e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsWindow
GetDC
CopyIcon
LoadCursorA
GetDlgItem
CalcMenuBar
GetWindowTextA
GetFocus
GetMenu
DrawTextW
DrawTextA
DialogBoxParamA
CopyImage
AlignRects
InsertMenuA
LoadMenuA
IsMenu
DrawTextW
CloseWindow
GetCursor
CopyRect
DrawIcon
GetMenu
GetDC
InsertMenuA
AppendMenuW
DialogBoxParamA
GetWindowTextA
CreateIcon
EndDialog
DrawIcon
GetWindowTextA
GetWindowTextLengthA
IsWindow
GetFocus
GetMenu
GetCursor
CopyRect
IsMenu
CalcMenuBar
kernel32
FindFirstFileA
CreateThread
FindAtomA
GetStdHandle
GetCommandLineA
GetOEMCP
GetCurrentProcessId
ExitThread
GetCurrentThread
CreateDirectoryA
GetLastError
GetComputerNameA
DeleteAtom
GetFileSize
Sleep
GetUserDefaultLangID
GetCurrentThread
Sleep
GetUserDefaultLangID
CreateDirectoryA
GetCommandLineA
OpenFile
GetConsoleOutputCP
FindFirstFileA
GetCurrentProcessId
GetCurrentProcess
GetFileTime
GetOEMCP
GlobalFree
FindAtomA
GetLastError
CopyFileW
GetCommandLineA
GetConsoleOutputCP
GetOEMCP
CreateDirectoryA
GetStdHandle
GlobalFree
CreateThread
GetCurrentProcess
Sleep
GetCurrentProcessId
GetUserDefaultLCID
GetCPInfo
GetUserDefaultLangID
FindFirstFileA
GetFileTime
OpenFile
GetConsoleMode
CopyFileW
GetFileTime
GetStdHandle
GetFileSize
CreateDirectoryA
FindAtomA
GetConsoleOutputCP
ExitProcess
GetComputerNameA
GlobalFree
GetCurrentProcess
FindFirstFileA
GetCommandLineA
GetLastError
GetCurrentThread
DeleteAtom
Sleep
GetComputerNameA
GetCurrentThread
OpenFile
CopyFileW
DeleteAtom
FindFirstFileA
DeleteFileW
GetUserDefaultLangID
ExitThread
GetConsoleOutputCP
Sleep
GetStdHandle
GetFileSize
GetFileTime
GetCPInfo
DeleteAtom
GetCurrentThread
GetCommandLineA
GetConsoleMode
GlobalFree
GetCurrentThreadId
GetLastError
GetComputerNameA
FindAtomA
Sleep
GetUserDefaultLangID
FindFirstFileA
GetConsoleOutputCP
GetStdHandle
CreateProcessA
OpenFile
Sections
.itext Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.init Size: 100KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ