Static task
static1
Behavioral task
behavioral1
Sample
273291567a770579ce3dc6917e1b4402_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
273291567a770579ce3dc6917e1b4402_JaffaCakes118
-
Size
144KB
-
MD5
273291567a770579ce3dc6917e1b4402
-
SHA1
46a9e2139d2021b2ca68c84fe53a7f798f9b0bc7
-
SHA256
a12e6a57bafb85c0d8eeb15d71697b09be4a0222ed897fc05b573d57a2593ac2
-
SHA512
1b966a4ca2103656e1a736ec0629f90364c68f66b3b13b0ff04f7b5ea8d3026c5fe3106113b8ad638335771d019ccc690d420b23a23bc867a86f9d808870e31b
-
SSDEEP
3072:MJiOVZaic4INE9+j8ocr2i+hF3ijB4QMr3:MJtVZ1cJGIj8YMB4F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 273291567a770579ce3dc6917e1b4402_JaffaCakes118
Files
-
273291567a770579ce3dc6917e1b4402_JaffaCakes118.exe windows:6 windows x86 arch:x86
f82d6e3fd7897538dd83fc7d9db2d298
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
CM_Query_Resource_Conflict_List
CM_Get_First_Log_Conf
ole32
IIDFromString
OleGetAutoConvert
HGLOBAL_UserSize
oleaut32
DispGetParam
winmm
mixerSetControlDetails
gdi32
EndPath
AddFontResourceW
DeleteMetaFile
advapi32
SetEntriesInAclW
RevertToSelf
CryptGetProvParam
GetLengthSid
IsTokenRestricted
shlwapi
PathIsRootW
PathIsUNCW
StrDupA
kernel32
IsDebuggerPresent
UnhandledExceptionFilter
WaitForSingleObject
GetCommConfig
GetConsoleScreenBufferInfoEx
GetCommandLineW
GetCurrentThreadId
CreateWaitableTimerA
SetFileApisToOEM
GetModuleHandleA
CreateActCtxW
CloseHandle
LocalFree
FileTimeToDosDateTime
FindResourceExW
EnumResourceNamesA
GetThreadLocale
user32
GetUpdateRect
LoadMenuA
NotifyWinEvent
InsertMenuItemW
SetClipboardViewer
GetForegroundWindow
LockSetForegroundWindow
VkKeyScanA
PackDDElParam
CreatePopupMenu
ToUnicode
GetMenuInfo
GetMenuState
secur32
VerifySignature
rpcrt4
I_RpcServerRegisterForwardFunction
NdrAllocate
I_RpcSessionStrictContextHandle
RpcBindingFromStringBindingW
UuidIsNil
esent
JetDelete
shell32
SHGetFolderLocation
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 112KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 392B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ