Static task
static1
Behavioral task
behavioral1
Sample
26e4f827bc41c6bc3b70111576a679f8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
26e4f827bc41c6bc3b70111576a679f8_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
26e4f827bc41c6bc3b70111576a679f8_JaffaCakes118
-
Size
140KB
-
MD5
26e4f827bc41c6bc3b70111576a679f8
-
SHA1
a3e7973bd07a6fcf697ba50765f9da161fe8ab36
-
SHA256
0dbc56697db6ebdae79e826b779509ff0c7a1a41570584bdc2d8fded5ccd0b84
-
SHA512
42c40eef6fc2388babba787c8ac7b8e4a1733634039398098ef89dea03f2b117bf7079113ec2e29eeeae2a9d349436dd1a3a4ada491252d8f93b3e59799954c1
-
SSDEEP
3072:tcDObeTmjETtaUzEt4phPBm/NqJ40kTZPpjEIDucM9ySM0YJss+1gUP:t4+jKVzEtkhPBKqJlkTZhLDuGwslU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26e4f827bc41c6bc3b70111576a679f8_JaffaCakes118
Files
-
26e4f827bc41c6bc3b70111576a679f8_JaffaCakes118.exe windows:4 windows x86 arch:x86
f502ce2a0efb5395f2b67a9bf387ee90
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeviceIoControl
EnterCriticalSection
FormatMessageA
GetCurrentProcessId
GetDateFormatA
GetEnvironmentVariableA
GetFileSize
GetFullPathNameA
GetLastError
GetStringTypeA
GetTimeZoneInformation
GlobalFree
InitializeCriticalSection
InterlockedExchange
WaitForSingleObject
user32
BeginPaint
ClientToScreen
DrawTextA
GetActiveWindow
GetCursorPos
GetDC
GetDesktopWindow
GetWindowTextA
LoadIconA
PtInRect
SetTimer
SetWindowLongA
gdi32
DeleteDC
ExcludeClipRect
SelectObject
SetStretchBltMode
StretchBlt
shell32
ExtractIconA
SHCreateDirectoryExW
SHGetFileInfoW
SHGetFolderPathA
ShellExecuteExA
comctl32
CreatePropertySheetPageW
DestroyPropertySheetPage
ImageList_EndDrag
InitCommonControls
PropertySheetW
Sections
.text Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ