Static task
static1
Behavioral task
behavioral1
Sample
29902f67ab115c96b1222e5d94ee3395_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
29902f67ab115c96b1222e5d94ee3395_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
29902f67ab115c96b1222e5d94ee3395_JaffaCakes118
-
Size
261KB
-
MD5
29902f67ab115c96b1222e5d94ee3395
-
SHA1
9fc6e7dfb1d157f72f23f5ac018f1b25c0959dd4
-
SHA256
063805fd09385077aea21bac62871196dfe9ab7ce9d979e63e839f8d23867dd7
-
SHA512
bfd0866f7f1d669f584d477a0be64ae3db31ec483210f0c3235f3d447b59421b524664751a97c43353930b88d0fcf69f5dca44bbd8b580321051ea31b716f2a6
-
SSDEEP
6144:96aGmgBm3w8gzPjD44e3dJQ8U7OF1sW8dWvYkWGKsHz4wnh:9lP3AzPj84MHQbsfvYov4w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29902f67ab115c96b1222e5d94ee3395_JaffaCakes118
Files
-
29902f67ab115c96b1222e5d94ee3395_JaffaCakes118.exe windows:4 windows x86 arch:x86
366e5a38496d9a866e75c30e63b77ba3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
CharLowerA
GetPropA
WindowFromPoint
PtInRect
CloseClipboard
DispatchMessageA
SendMessageA
GetLastActivePopup
InvalidateRect
GetSubMenu
TranslateMDISysAccel
GetKeyboardLayout
GetMenuItemCount
UnregisterClassA
AdjustWindowRectEx
LoadKeyboardLayoutA
FillRect
SetActiveWindow
IsWindowEnabled
DefMDIChildProcA
GetClassNameA
DefFrameProcA
IsWindowVisible
GetWindow
GetKeyboardType
GetMenu
SetScrollInfo
MapWindowPoints
GetFocus
IsRectEmpty
GetScrollInfo
GetKeyboardState
DrawIcon
EnumWindows
IsWindowUnicode
GetKeyboardLayoutList
CallNextHookEx
GetIconInfo
wsprintfA
RemovePropA
InflateRect
GetClassInfoA
DrawMenuBar
FrameRect
IntersectRect
CharLowerBuffA
SetMenu
GetMessagePos
ActivateKeyboardLayout
GetDCEx
MessageBoxA
BeginPaint
IsDialogMessageW
SetMenuItemInfoA
SetWindowLongA
IsZoomed
GetForegroundWindow
GetMenuStringA
GetMenuItemInfoA
IsWindow
CallWindowProcA
GetCursor
MsgWaitForMultipleObjects
EnableMenuItem
InsertMenuA
SetRect
SetPropA
DeleteMenu
RegisterClipboardFormatA
GetSysColor
SetFocus
TranslateMessage
DestroyIcon
IsChild
GetDlgItem
DrawTextA
IsIconic
CreateMenu
GetDesktopWindow
CharToOemA
GetClientRect
DrawAnimatedRects
SetParent
GetSystemMenu
GetClipboardData
GetWindowLongA
InsertMenuItemA
SetClassLongA
GetDC
CheckMenuItem
IsDialogMessageA
GetKeyboardLayoutNameA
GetClassLongA
gdi32
CreateBitmap
SetBkColor
CreateFontIndirectA
GetDIBColorTable
SetBkMode
CopyEnhMetaFileA
GetObjectA
BitBlt
kernel32
SetEndOfFile
SetFilePointer
lstrlenA
GetProcAddress
LoadLibraryA
SizeofResource
GetModuleHandleA
RaiseException
GetCommandLineW
lstrcmpiA
LocalFree
SetHandleCount
VirtualAllocEx
IsBadHugeReadPtr
SetEvent
MoveFileExA
HeapDestroy
ReadFile
lstrcmpA
VirtualAlloc
IsBadReadPtr
VirtualQuery
ResetEvent
GetACP
ExitThread
SetLastError
ExitProcess
SetThreadLocale
GetLastError
lstrcpynA
WaitForSingleObject
WriteFile
WideCharToMultiByte
Sections
.text Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 163KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES50 Size: 512B - Virtual size: 181B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES06 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES72 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES18 Size: 1024B - Virtual size: 657B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES45 Size: 512B - Virtual size: 299B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES52 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES40 Size: 1024B - Virtual size: 913B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES08 Size: 1024B - Virtual size: 767B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ