Static task
static1
Behavioral task
behavioral1
Sample
26bedf033b2cddbb1e3ed1aeeb7dfee6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
26bedf033b2cddbb1e3ed1aeeb7dfee6_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
26bedf033b2cddbb1e3ed1aeeb7dfee6_JaffaCakes118
-
Size
213KB
-
MD5
26bedf033b2cddbb1e3ed1aeeb7dfee6
-
SHA1
7acaf47d111f4b0fe1ac2abbec0e93a2b87cd480
-
SHA256
6dda71592b7c76e29eae4c97cada8f9cc4d946dd258c9e71f7c415bae97c435a
-
SHA512
dd31a7465f18fe7248f42054f50c35b25411fd7122874123da858a53cdf57ef37ccba8e7d000fcfbaf91751415a7681e71fb3028b37909d12e4089d48b759b41
-
SSDEEP
6144:z0Bctf7LvZYKrSDkZ97BSW3/h8vRNz57f:wu17LvZ7AW3uvj5f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26bedf033b2cddbb1e3ed1aeeb7dfee6_JaffaCakes118
Files
-
26bedf033b2cddbb1e3ed1aeeb7dfee6_JaffaCakes118.exe windows:4 windows x86 arch:x86
d3a2da4a605391ed2eb0ffccc678226c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegSetValueW
RegOpenKeyW
user32
UnhookWindowsHookEx
GetParent
DeferWindowPos
HideCaret
BeginPaint
DrawFocusRect
WaitForInputIdle
RegisterClipboardFormatW
GetCapture
GetScrollInfo
DefMDIChildProcW
GetDlgItem
GetWindowTextW
IsWindow
TrackPopupMenu
ShowWindow
GetClassNameW
CallNextHookEx
AppendMenuW
ChangeDisplaySettingsW
PostMessageW
LoadImageW
ReleaseCapture
TranslateMDISysAccel
AdjustWindowRectEx
GetSystemMetrics
SetWindowRgn
kernel32
MultiByteToWideChar
GetProcAddress
LoadLibraryA
VirtualAlloc
GetOEMCP
HeapReAlloc
GetStringTypeA
LCMapStringA
LCMapStringW
InterlockedDecrement
GetStringTypeW
InterlockedIncrement
HeapDestroy
GetEnvironmentVariableA
GetVersionExA
GetLastError
GetModuleHandleA
TlsAlloc
GetCurrentThreadId
GetStartupInfoA
SetLastError
TlsGetValue
InitializeCriticalSection
RtlUnwind
WriteFile
VirtualFree
HeapCreate
HeapFree
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
HeapAlloc
GetACP
GetFileType
SetHandleCount
GetStdHandle
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
UnhandledExceptionFilter
ExitProcess
GetCurrentProcess
FreeEnvironmentStringsA
GetModuleFileNameA
FreeEnvironmentStringsW
GetVersion
TerminateProcess
GetCommandLineA
MapViewOfFile
CreateFileA
TlsSetValue
CreateFileMappingW
Sections
.text Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ