Static task
static1
Behavioral task
behavioral1
Sample
292a5c2a8bd3dc7b5702de997b05bbbb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
292a5c2a8bd3dc7b5702de997b05bbbb_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
292a5c2a8bd3dc7b5702de997b05bbbb_JaffaCakes118
-
Size
313KB
-
MD5
292a5c2a8bd3dc7b5702de997b05bbbb
-
SHA1
09a88217e0f213b48b1eb09ef141d5b39d1f59ef
-
SHA256
ea834e9bf221d79136345e26fb0fbf30ab1ec16e827e7b6e05858623143571a6
-
SHA512
744df34341223f973dd8d9eb009135ceb89ed55dcfa9640e8598a856fca3e3e0f3e0f05d04e13b3c1abb6822edea3a8946944167ae6a35cc1d4b7243fbb9a602
-
SSDEEP
6144:+6X5bT4nDlOE1q+rplox5aC1mMEwC2SNUkf6o4DeV1SgGwwUTNwz9s8dG39cSI:+6J4nRhply4CojFm44DevSg/wU3ru
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 292a5c2a8bd3dc7b5702de997b05bbbb_JaffaCakes118
Files
-
292a5c2a8bd3dc7b5702de997b05bbbb_JaffaCakes118.exe windows:4 windows x86 arch:x86
4298522a4c0cdc5703f4b36c5a7f7f4e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
CreateToolbarEx
kernel32
GetNumberOfConsoleFonts
LocalAlloc
CreateFileA
UnmapViewOfFile
GetFileType
MapViewOfFile
DisableThreadLibraryCalls
GetFileSize
SetFilePointer
GetTickCount
GlobalSize
WriteFile
ExitProcess
lstrlenA
CloseHandle
CreateFileMappingA
GlobalAlloc
ReadFile
Sleep
LocalFree
GlobalFree
avifil32
AVIStreamSetFormat
AVIFileRelease
AVISaveOptions
AVIStreamRelease
AVIFileOpenA
AVIStreamInfoA
AVIFileCreateStreamA
AVIFileInit
AVIStreamGetFrameOpen
AVIStreamGetFrame
AVIFileGetStream
AVIStreamGetFrameClose
AVIMakeCompressedStream
AVIStreamWrite
user32
GetClientRect
SetCapture
DispatchMessageA
EndPaint
SetWindowTextA
PeekMessageA
SetFocus
SetCursor
SetWindowLongA
UpdateWindow
SubtractRect
ReleaseCapture
LoadIconA
GetWindowLongA
wvsprintfA
OffsetRect
LoadCursorA
InvalidateRect
IsWindow
GetClassLongA
TranslateMessage
GetKeyState
GetMessageA
BeginPaint
DefWindowProcA
DdeDisconnect
GetFocus
RegisterClassA
DestroyWindow
ShowWindow
GetWindowRect
CallWindowProcA
EnumWindowStationsW
wsprintfA
MessageBoxA
ScreenToClient
CreateWindowExA
MoveWindow
SendMessageA
gdi32
FillRgn
CreateRectRgn
SelectObject
DeleteObject
CreateDIBSection
GetStockObject
SetDIBitsToDevice
StretchBlt
CombineRgn
BitBlt
GetObjectA
StretchDIBits
GetCurrentObject
SetStretchBltMode
CreateCompatibleDC
DeleteDC
SetDIBColorTable
Sections
.text Size: 187KB - Virtual size: 187KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 117KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 5KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ