Static task
static1
Behavioral task
behavioral1
Sample
408399b5ec4d3be6b2be3920e20060ab_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
408399b5ec4d3be6b2be3920e20060ab_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
408399b5ec4d3be6b2be3920e20060ab_JaffaCakes118
-
Size
180KB
-
MD5
408399b5ec4d3be6b2be3920e20060ab
-
SHA1
d70030d598e0e02398d6277bb8e0abf4720c2fe1
-
SHA256
e807a6c1df356045213919d7cd7e053b8ec02678011ecbd0e0a821bb770cc342
-
SHA512
b7a008a19d6363ee9c474208b3691e76c8d2842cbbbe0a7111e9a46b366e02e886c3d09cd291dea9f405b56c93361eebf9162db7649cefe277634aa515731780
-
SSDEEP
1536:3cdAU8kAVwzwyqa9PoP2t8SN1D/IIeqrwNMVpR:dM9P5N1D/feqrwe/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 408399b5ec4d3be6b2be3920e20060ab_JaffaCakes118
Files
-
408399b5ec4d3be6b2be3920e20060ab_JaffaCakes118.exe windows:4 windows x86 arch:x86
9ea5d65123bb4cb1e5ff61242b36a080
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord815
ord2514
ord2621
ord1134
ord1199
ord1247
ord641
ord665
ord686
ord656
ord810
ord800
ord825
ord3619
ord3626
ord2414
ord3663
ord5265
ord4376
ord4853
ord4998
ord6052
ord4078
ord1775
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5280
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord4627
ord4425
ord3597
ord941
ord860
ord540
ord324
ord2370
ord4234
ord384
ord354
ord2299
ord2302
ord6334
ord3092
ord2097
ord2243
ord4160
ord4710
ord755
ord3147
ord537
ord939
ord609
ord2645
ord1979
ord6385
ord5186
ord3499
ord2515
ord355
ord1200
ord2642
ord5953
ord2029
ord6663
ord858
ord535
ord6648
ord4202
ord4204
ord2919
ord924
ord940
ord3303
ord4224
ord823
ord1138
ord1105
ord3177
ord2915
ord1168
ord2863
ord2379
ord6055
ord1776
ord5290
ord3402
ord3610
ord567
ord1146
ord3398
ord3733
ord4000
ord2862
ord2077
ord5308
ord4779
ord5811
ord5482
ord2032
ord4411
ord4447
ord4335
ord4863
ord4975
ord5797
ord5479
ord1995
ord967
ord3717
ord523
ord791
ord4919
ord2575
ord4396
ord3574
ord6008
ord809
ord556
ord4275
ord4284
ord2567
ord2754
ord5875
ord3874
ord2859
ord6358
ord1088
ord2122
ord2982
ord5714
ord5289
ord5307
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord470
ord4673
ord1576
msvcrt
_controlfp
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
?terminate@@YAXXZ
_setmbcp
__CxxFrameHandler
atoi
sprintf
_mbscmp
memset
free
memcpy
rand
__dllonexit
_onexit
_except_handler3
__set_app_type
kernel32
GetStartupInfoA
GetModuleHandleA
WriteFile
CreateFileA
lstrlenA
GetFileSize
ReadFile
CloseHandle
lstrcmpA
Sleep
user32
WindowFromPoint
GetCursorPos
GetCapture
GetIconInfo
ClientToScreen
ReleaseCapture
SetRectEmpty
DrawStateA
DrawEdge
GetWindowRect
InvalidateRect
InflateRect
GetSysColor
SetTimer
LoadIconA
EnableWindow
GetClientRect
IsIconic
GetSystemMenu
SendMessageA
AppendMenuA
DrawIcon
GetSystemMetrics
OffsetRect
gdi32
StretchDIBits
SetStretchBltMode
SetDIBitsToDevice
CreateSolidBrush
advapi32
RegCreateKeyA
RegSetValueExA
RegQueryValueExA
comctl32
_TrackMouseEvent
Sections
.text Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ