Static task
static1
Behavioral task
behavioral1
Sample
02db627580a57fc36653ae2e56be8034_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
02db627580a57fc36653ae2e56be8034_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
02db627580a57fc36653ae2e56be8034_JaffaCakes118
-
Size
997KB
-
MD5
02db627580a57fc36653ae2e56be8034
-
SHA1
40506d92d77d44f4ce7d14d8449b5954a435fc7a
-
SHA256
77e2735374f2a211caca87a7f35b7aec5c4fcfee89d3c6e650738275940c9c28
-
SHA512
9fc3b78f34e514c19c0d09114b58a42551be49b82b3d2658bced55822f1679b8c8a70231767524e63d07a496c00a80c78e26f69e6aafa786e3669a7eb8e5d003
-
SSDEEP
24576:17tiQwDNT7DhqeXU0lwFRWLDdcGBUYlclIDDNM/0A:17t7aqCYReDdlWYalRF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02db627580a57fc36653ae2e56be8034_JaffaCakes118
Files
-
02db627580a57fc36653ae2e56be8034_JaffaCakes118.exe windows:5 windows x86 arch:x86
5f51a70ae1b5310d46d7a73d476f4c04
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetSaveFileNameW
ChooseColorW
GetOpenFileNameW
kernel32
GetProcAddress
VirtualAlloc
HeapAlloc
HeapFree
HeapSize
GetCurrentProcess
ExitProcess
FreeEnvironmentStringsW
UnhandledExceptionFilter
GetCurrentThreadId
GetLastError
FindClose
GetSystemTimeAsFileTime
GetSystemInfo
FormatMessageW
lstrcmpiW
GetModuleFileNameW
GetStartupInfoW
FindFirstFileW
IsValidCodePage
GetUserDefaultLCID
GetModuleHandleW
uxtheme
CloseThemeData
IsAppThemed
GetThemeColor
DrawThemeParentBackground
wintrust
CryptCATAdminCalcHashFromFileHandle
CryptCATAdminEnumCatalogFromHash
CryptCATAdminAcquireContext
WinVerifyTrust
msvcrt
__p__fmode
__set_app_type
_except_handler3
__setusermatherr
_exit
_XcptFilter
exit
_wcmdln
__wgetmainargs
_initterm
__p__commode
_adjust_fdiv
_controlfp
mpr
WNetGetConnectionW
ole32
CLSIDFromProgID
CLSIDFromString
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 6.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.02e4 Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.h5rv0 Size: 753KB - Virtual size: 753KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ