Static task
static1
Behavioral task
behavioral1
Sample
06505846ae03476f0708f7ec59e3b628_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
06505846ae03476f0708f7ec59e3b628_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
06505846ae03476f0708f7ec59e3b628_JaffaCakes118
-
Size
1.1MB
-
MD5
06505846ae03476f0708f7ec59e3b628
-
SHA1
3f11d0c5e1bafd0e579e12c9cc606f2b459996ca
-
SHA256
b153abaafb9f80c21cfd2dfdb3a1cd9d2acc771a71d5bdaaa5f8cc7fad616af8
-
SHA512
44fcaaf8622e171c253e8d3d3c35c7972256329bdefab29a2782d6f5fd288d59b921fb9596846018ae8ad95221c5d95c84cf4652c2f064b1a6e03ece0b235d03
-
SSDEEP
12288:cPgROogY49GEG+9NIehBcTmFFzfe0lE5ijc9azQuva481FQRndkUqeE:cIkogYyGEoercaFFTep6c9zRXQlyUqeE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06505846ae03476f0708f7ec59e3b628_JaffaCakes118
Files
-
06505846ae03476f0708f7ec59e3b628_JaffaCakes118.exe windows:5 windows x86 arch:x86
037bb88551a31a97b4fc6040a7c19f6e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
lstrlenA
lstrcpyA
lstrcmpA
LeaveCriticalSection
lstrcmpiA
WideCharToMultiByte
FormatMessageW
lstrcmpW
GetCurrentProcess
MultiByteToWideChar
SetLastError
ExitProcess
SetUnhandledExceptionFilter
lstrcpyW
lstrcatW
EnterCriticalSection
UnhandledExceptionFilter
RaiseException
GetLastError
DeleteCriticalSection
CompareStringW
lstrcpynW
InitializeCriticalSectionAndSpinCount
user32
SetWindowPos
ShowWindow
IsChild
MessageBoxW
IsWindowVisible
GetWindow
MessageBoxA
UpdateWindow
SetFocus
PostQuitMessage
GetDC
shell32
SHCreateShellFolderView
DuplicateIcon
SHReplaceFromPropSheetExtArray
SHFindFiles
SHLoadNonloadedIconOverlayIdentifiers
SHGetInstanceExplorer
DragQueryFile
SHGetItemFromDataObject
Shell_GetCachedImageIndex
DragAcceptFiles
SetCurrentProcessExplicitAppUserModelID
SHGetFolderLocation
SHGetSetFolderCustomSettings
SHCreatePropSheetExtArray
SHFindFiles
SHGetFileInfo
DragQueryPoint
DoEnvironmentSubstW
SHAddFromPropSheetExtArray
SHAssocEnumHandlersForProtocolByApplication
Sections
.text Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ettabr Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vol Size: 271KB - Virtual size: 271KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qzh Size: 430KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qxuext Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.nitb Size: 127KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.cpdpz Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xbqnyn Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ