Static task
static1
Behavioral task
behavioral1
Sample
de74448b4a398e9df200dcfdc2c6f7e5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de74448b4a398e9df200dcfdc2c6f7e5_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
de74448b4a398e9df200dcfdc2c6f7e5_JaffaCakes118
-
Size
201KB
-
MD5
de74448b4a398e9df200dcfdc2c6f7e5
-
SHA1
1065fe6f58880976cfeab0e57d9f35de587a54e4
-
SHA256
b8417527766e5b64a490cafb0105e6df80dcea8a9c2dca88ce2fcc79a703724a
-
SHA512
0591178849d17f12227eea866cff806a91fae6ec8cca45fcd45aa51d89aed6adf2c9c3bf8f0b61d92156ef66b0ecf41b5d88c19cb75548bb770826ad46254517
-
SSDEEP
3072:ptZBDetdPfnhv7o4CbWnHcU3zbjgUznaBVrEOKQz6Mq3TlMg2agNFGvynNE1HJSg:ptZBDebfnhjJfDgUzSEetg2agKveUQF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de74448b4a398e9df200dcfdc2c6f7e5_JaffaCakes118
Files
-
de74448b4a398e9df200dcfdc2c6f7e5_JaffaCakes118.exe windows:4 windows x86 arch:x86
0e2177b9f8405b0975d53b13a4d06c99
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
winmm
mciSendCommandA
sndPlaySoundA
oleacc
LresultFromObject
CreateStdAccessibleObject
user32
ReleaseDC
GetWindowLongA
MoveWindow
SetWindowLongA
GetDlgItem
GetSysColor
SetCursor
GetWindowInfo
FillRect
IsWindow
ReleaseCapture
SetWindowPos
GetDC
LoadCursorA
SetCapture
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
ole32
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID
shell32
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
kernel32
SetTapeParameters
GetVersion
ClearCommError
InterlockedExchange
GetCurrentProcessId
GetLocalTime
Sleep
EnumResourceNamesA
ExitProcess
GetWindowsDirectoryA
FindClose
FindFirstFileA
gdi32
DeleteMetaFile
SelectObject
BitBlt
GetTextExtentPoint32A
TextOutA
SaveDC
GetStockObject
DeleteDC
SetTextColor
RestoreDC
EnumFontFamiliesExA
CreateRectRgn
CreateSolidBrush
GetObjectA
CreateFontIndirectA
DeleteObject
GetDeviceCaps
Rectangle
CreateCompatibleDC
SetBkMode
CreateCompatibleBitmap
advapi32
RegCreateKeyExA
RegEnumKeyExA
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
RegDeleteKeyA
RegSetValueExA
Sections
.text Size: 175KB - Virtual size: 174KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lib Size: 512B - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ