Static task
static1
Behavioral task
behavioral1
Sample
57a8de378eca755ef3d46091a546280e_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
57a8de378eca755ef3d46091a546280e_JaffaCakes118
-
Size
191KB
-
MD5
57a8de378eca755ef3d46091a546280e
-
SHA1
ab462c6f884b7e652127720a25cdfa95e3c67058
-
SHA256
3bc58bf535ac5b065fc08ac751c19e5e4d0d61042201e7f2938eb416e8a58be1
-
SHA512
ca3f028c42d3b01594d037477d55602bc1890a69c1f51194db79e24a23442d323b3524c292c2357d5bc2851a48c2edb092e87b8fb3d7d481fffa2006de1dc4e3
-
SSDEEP
3072:Y1FX8gYZ4CeU23vpjY+cLB09fLRqooHH5m/+yA78d:Yr924C7kM+cLB0ZLRLQ5m5B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 57a8de378eca755ef3d46091a546280e_JaffaCakes118
Files
-
57a8de378eca755ef3d46091a546280e_JaffaCakes118.exe windows:5 windows x86 arch:x86
c55c6f027034bdf5489e9179349f9068
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerFindFileW
VerQueryValueW
user32
GetQueueStatus
GetKBCodePage
GetClipboardViewer
DeferWindowPos
keybd_event
GetClassInfoW
DrawEdge
ToUnicode
GetInputState
AttachThreadInput
LookupIconIdFromDirectory
GetShellWindow
GetParent
IsWindowVisible
GetSubMenu
GetWindowContextHelpId
mscms
GetColorDirectoryW
rpcrt4
I_RpcServerSetAddressChangeFn
RpcBindingToStringBindingW
urlmon
URLOpenStreamA
ole32
StgIsStorageFile
winscard
SCardTransmit
shlwapi
StrStrIW
PathParseIconLocationW
wintrust
WintrustRemoveActionID
mprapi
MprConfigInterfaceTransportGetHandle
imm32
ImmGetCompositionWindow
pdh
PdhEnumObjectsHW
oleaut32
BSTR_UserUnmarshal
SafeArrayUnlock
VarBstrFromBool
advapi32
RegDeleteValueA
gdi32
GetWorldTransform
GdiFlush
GetROP2
CreateCompatibleBitmap
GetNearestPaletteIndex
kernel32
LocalFree
BackupWrite
SetFilePointer
LockFile
GetConsoleFontSize
GetCurrentProcessId
GetSystemTime
GetThreadUILanguage
GetCommandLineA
LCMapStringW
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 57KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ