Static task
static1
Behavioral task
behavioral1
Sample
18522b0a2ca8f1b1a5208b640f22dee2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
18522b0a2ca8f1b1a5208b640f22dee2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
18522b0a2ca8f1b1a5208b640f22dee2_JaffaCakes118
-
Size
158KB
-
MD5
18522b0a2ca8f1b1a5208b640f22dee2
-
SHA1
9061cd3b5af8c8cd23a7f4229ccb6291d235c037
-
SHA256
70225eef7fd5cf652aba0263bc74820acd7a022caa1abcc1037189389c385c7f
-
SHA512
fa7f645fd598034818458d88eed0016996d35a99297c995c73969bf9530f28c3b3c183b4f22e6f0c08b41a0b51cc207816c4fc46eafa5e58422138d221f87ac4
-
SSDEEP
3072:4nUbdpWKjtOWKtKP5vtrEjuWAPNCgcGidTUMyibC9mtrGKZzeFLVYjxb8:4UbPlRp5SjulFcGiqrWZZzepVQg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18522b0a2ca8f1b1a5208b640f22dee2_JaffaCakes118
Files
-
18522b0a2ca8f1b1a5208b640f22dee2_JaffaCakes118.exe windows:4 windows x86 arch:x86
909eb15451dfaa3258f5b8a2814f7d40
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
shell32
ShellExecuteW
user32
GetMenuStringW
GetWindowInfo
GetWindowLongW
SetWindowsHookExW
AdjustWindowRect
GetDlgItem
GetWindowRect
MoveWindow
GetSysColor
MessageBoxW
SetWindowTextW
EndDialog
SetRect
SendMessageW
gdi32
DeleteDC
CreateDCW
GetObjectW
MoveToEx
ExtCreateRegion
BitBlt
DeleteObject
GetDeviceCaps
LineTo
StretchBlt
GetTextMetricsW
CreatePatternBrush
CreateSolidBrush
SetViewportExtEx
SetBkColor
CreateFontW
SetViewportOrgEx
CreateDIBSection
CreateCompatibleDC
SetBkMode
SelectObject
SetTextColor
GetCharWidthW
CreatePen
CreateCompatibleBitmap
CombineRgn
GetStockObject
advapi32
RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegQueryValueExW
RegDeleteKeyA
comdlg32
GetSaveFileNameW
kernel32
DeleteFileW
GetCurrentProcessId
MultiByteToWideChar
GetVDMCurrentDirectories
MoveFileW
SetThreadPriorityBoost
SetFilePointer
LoadLibraryW
FreeLibrary
CreateFileA
GetProcAddress
FindClose
CreateProcessW
EnumResourceNamesW
ExitProcess
FindFirstFileW
GetLocalTime
WriteFile
SetUnhandledExceptionFilter
GetUserDefaultUILanguage
OutputDebugStringW
GetModuleHandleA
HeapAlloc
WideCharToMultiByte
ReadFile
HeapFree
comctl32
ImageList_Draw
ImageList_ReplaceIcon
ImageList_Create
ImageList_Destroy
msvfw32
ICInfo
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imul Size: 1024B - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ