Static task
static1
Behavioral task
behavioral1
Sample
25e1c466e072906f12171002097d41d4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
25e1c466e072906f12171002097d41d4_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
25e1c466e072906f12171002097d41d4_JaffaCakes118
-
Size
226KB
-
MD5
25e1c466e072906f12171002097d41d4
-
SHA1
8521f990e8a27e4a1f3772bc3667b8262a32f076
-
SHA256
01b0cdfdc91804fd3256e02f8b364d287cdffd30cc0e2880f28d833925919504
-
SHA512
fc331b571f7343e82689046726f748c94ade3c13cd0636b894028e928f5cbd52bfeb961006c4317d21ab28d722a3dc590acad8682e1c479c89f97a3f40fc4380
-
SSDEEP
6144:+6X5bT4nDlOE1q+rplox5aC1mMEwC2SNUkf6o4DeVvSgGw+:+6J4nRhply4CojFm44DeZSg/+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25e1c466e072906f12171002097d41d4_JaffaCakes118
Files
-
25e1c466e072906f12171002097d41d4_JaffaCakes118.exe windows:4 windows x86 arch:x86
4298522a4c0cdc5703f4b36c5a7f7f4e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
CreateToolbarEx
kernel32
GetNumberOfConsoleFonts
LocalAlloc
CreateFileA
UnmapViewOfFile
GetFileType
MapViewOfFile
DisableThreadLibraryCalls
GetFileSize
SetFilePointer
GetTickCount
GlobalSize
WriteFile
ExitProcess
lstrlenA
CloseHandle
CreateFileMappingA
GlobalAlloc
ReadFile
Sleep
LocalFree
GlobalFree
avifil32
AVIStreamSetFormat
AVIFileRelease
AVISaveOptions
AVIStreamRelease
AVIFileOpenA
AVIStreamInfoA
AVIFileCreateStreamA
AVIFileInit
AVIStreamGetFrameOpen
AVIStreamGetFrame
AVIFileGetStream
AVIStreamGetFrameClose
AVIMakeCompressedStream
AVIStreamWrite
user32
GetClientRect
SetCapture
DispatchMessageA
EndPaint
SetWindowTextA
PeekMessageA
SetFocus
SetCursor
SetWindowLongA
UpdateWindow
SubtractRect
ReleaseCapture
LoadIconA
GetWindowLongA
wvsprintfA
OffsetRect
LoadCursorA
InvalidateRect
IsWindow
GetClassLongA
TranslateMessage
GetKeyState
GetMessageA
BeginPaint
DefWindowProcA
DdeDisconnect
GetFocus
RegisterClassA
DestroyWindow
ShowWindow
GetWindowRect
CallWindowProcA
EnumWindowStationsW
wsprintfA
MessageBoxA
ScreenToClient
CreateWindowExA
MoveWindow
SendMessageA
gdi32
FillRgn
CreateRectRgn
SelectObject
DeleteObject
CreateDIBSection
GetStockObject
SetDIBitsToDevice
StretchBlt
CombineRgn
BitBlt
GetObjectA
StretchDIBits
GetCurrentObject
SetStretchBltMode
CreateCompatibleDC
DeleteDC
SetDIBColorTable
Sections
.text Size: 187KB - Virtual size: 187KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 117KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 5KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ