Static task
static1
Behavioral task
behavioral1
Sample
f92322b3b28f947cb9d7cd80eb571c28_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f92322b3b28f947cb9d7cd80eb571c28_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f92322b3b28f947cb9d7cd80eb571c28_JaffaCakes118
-
Size
100KB
-
MD5
f92322b3b28f947cb9d7cd80eb571c28
-
SHA1
4a1e272a0b4f3fc0243ba8c7ea027cc77cc46ce7
-
SHA256
64001fe73360c8d022d61377852fee9d66ad79f267378638509419531d44b263
-
SHA512
fd23af2f8c4dc36619d552a916a517a78c3d0c077a75240a6b9008a3d753c77dcfc8f25dc023c096bc4f6136e45cdc24da1180285df586e667db00d00d1c7904
-
SSDEEP
1536:y9ZQxjwFxx08go02rJR40g5zMLJWtInstC6ak/G+W2PNr5:y/QUeto02E5zMEtsstC6p/9r5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource f92322b3b28f947cb9d7cd80eb571c28_JaffaCakes118
Files
-
f92322b3b28f947cb9d7cd80eb571c28_JaffaCakes118.exe windows:4 windows x86 arch:x86
ad1638afc2319721a4701418eb3ae421
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
LCMapStringW
LCMapStringA
MultiByteToWideChar
WriteFile
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetProcAddress
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
HeapFree
HeapReAlloc
RtlUnwind
HeapAlloc
GetStringTypeA
GetStringTypeW
GetSystemTime
GetLastError
MulDiv
LoadLibraryA
lstrcpynW
lstrcpyW
FindResourceA
SizeofResource
LoadResource
LockResource
FreeResource
lstrlenW
lstrlenA
GetModuleFileNameA
SetConsoleCtrlHandler
user32
GetDoubleClickTime
SetDoubleClickTime
CreateWindowExA
ShowWindow
IsWindowEnabled
MoveWindow
DestroyWindow
WindowFromPoint
GetWindowDC
DrawCaption
OffsetRect
DrawEdge
DrawFocusRect
DrawFrameControl
DrawTextA
GetSysColorBrush
FillRect
SetWindowRgn
GetDC
GetSystemMenu
CreatePopupMenu
AppendMenuA
TrackPopupMenuEx
DestroyMenu
GetSystemMetrics
GetWindowRect
GetCursorPos
SetRect
IntersectRect
SetRectEmpty
GetFocus
LoadBitmapA
CreateCaret
LockWindowUpdate
ShowCaret
AdjustWindowRect
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
gdi32
GetTextExtentPoint32A
ExtTextOutA
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
SetBkMode
DeleteObject
TextOutA
CreateEllipticRgn
GetDeviceCaps
CreateRectRgn
GetRgnBox
CreateFontA
advapi32
IsValidSid
GetUserNameA
Sections
.text Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ