Static task
static1
Behavioral task
behavioral1
Sample
b8fc4a321ff4430b89bb8c11ea91c580_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b8fc4a321ff4430b89bb8c11ea91c580_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
b8fc4a321ff4430b89bb8c11ea91c580_JaffaCakes118
-
Size
105KB
-
MD5
b8fc4a321ff4430b89bb8c11ea91c580
-
SHA1
728f151ed405ea423f26c3ee7852e47e2df9df59
-
SHA256
b8cedc85248976303949d67cc8a2429acf5f6bef7460699e77c07fe5598079d8
-
SHA512
1c53be934a376d50a9b999c27cb9e9ce81abac0e502378a1346425d74a50da631aa86729cc81a960591e73071693bd511317736581bd4b03e9feae4a4bcc7d53
-
SSDEEP
1536:Cd04/CSIgLAgH4mthMui/JGxE3+piPnoE8LEAmlQYr8hAmyQUpJiJM2s:cX9zhC/Jgm+pankEnxJEYMW2s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8fc4a321ff4430b89bb8c11ea91c580_JaffaCakes118
Files
-
b8fc4a321ff4430b89bb8c11ea91c580_JaffaCakes118.exe windows:5 windows x86 arch:x86
d2e7a14775195c85424e877dc900f9f0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetClassLongW
ClientToScreen
GetScrollBarInfo
GetWindowLongA
UpdateLayeredWindow
DefWindowProcA
EnumClipboardFormats
GetOpenClipboardWindow
advapi32
RegOpenKeyA
gdi32
GetTextExtentPointA
EnumMetaFile
GetObjectA
GetDCBrushColor
GetLogColorSpaceW
GetPolyFillMode
PtVisible
SetMapperFlags
MoveToEx
SetDCBrushColor
kernel32
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetLocaleInfoW
HeapSize
GetLocalTime
SetStdHandle
ResetEvent
OpenProcess
GetThreadContext
GetCommModemStatus
GetMailslotInfo
HeapAlloc
GetCommMask
GetProcessHeap
GetTempFileNameW
SetEndOfFile
SetFileAttributesW
GetSystemDirectoryW
GetLastError
FreeLibrary
LoadLibraryW
DeleteFileA
CloseHandle
TerminateProcess
GetCurrentProcess
CreateMutexA
GetVersion
WaitForSingleObject
LocalFree
LocalAlloc
CompareStringW
GetModuleFileNameW
SizeofResource
LoadResource
FindResourceW
GetCurrentThread
GetTickCount
EncodePointer
DecodePointer
Sleep
GetCommandLineW
ReleaseMutex
GetModuleFileNameA
SetProcessAffinityMask
LoadLibraryA
GetWindowsDirectoryA
GetModuleHandleW
GetProcAddress
GetCurrentProcessId
CreateFileA
GetCurrentThreadId
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
HeapSetInformation
InterlockedIncrement
InterlockedDecrement
GetCommandLineA
GetStartupInfoA
GetCPInfo
HeapFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
VirtualAlloc
HeapReAlloc
Sections
.text Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ