Static task
static1
Behavioral task
behavioral1
Sample
668d1d7c39af8906ed862ae9ff645a63_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
668d1d7c39af8906ed862ae9ff645a63_JaffaCakes118
-
Size
187KB
-
MD5
668d1d7c39af8906ed862ae9ff645a63
-
SHA1
35644070d27bde9f87a5552becc4b18d017d9faf
-
SHA256
a1a6a9070efc72cd197cb8d27342f0cd6ba8f15e706b308f164fcafd6f561258
-
SHA512
b5f0ad76de4110445fb978c13c9d1c76676ff541f5d0721b2303765c44ac5bb2037e92914e5d0dae8c7dc16c8fe5bb376e17e3e039df6383d7a9374472b13a2e
-
SSDEEP
3072:2D8qMHPIFIhK2kwVP5YdShdXlkkaK/PngcfS3CYo7RWa5A+:2DhMHPThK2x5WSXl6K/lS3CdY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 668d1d7c39af8906ed862ae9ff645a63_JaffaCakes118
Files
-
668d1d7c39af8906ed862ae9ff645a63_JaffaCakes118.exe windows:5 windows x86 arch:x86
619e00940fad11dd6c50f19869a0fb38
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
StgIsStorageFile
mscms
GetColorDirectoryW
winscard
SCardTransmit
imm32
ImmGetCompositionWindow
wintrust
WintrustRemoveActionID
pdh
PdhEnumObjectsHW
shlwapi
StrStrIW
PathParseIconLocationW
advapi32
RegDeleteValueA
kernel32
GetSystemTime
GetCurrentProcessId
GetConsoleFontSize
LocalFree
GetThreadUILanguage
GetCommandLineA
LCMapStringW
SetFilePointer
BackupWrite
LockFile
gdi32
CreateCompatibleBitmap
GdiFlush
GetROP2
GetNearestPaletteIndex
GetWorldTransform
urlmon
URLOpenStreamA
version
VerQueryValueW
VerFindFileW
mprapi
MprConfigInterfaceTransportGetHandle
oleaut32
BSTR_UserUnmarshal
SafeArrayUnlock
VarBstrFromBool
rpcrt4
RpcBindingToStringBindingW
I_RpcServerSetAddressChangeFn
user32
GetParent
ToUnicode
DrawEdge
DeferWindowPos
keybd_event
IsWindowVisible
GetSubMenu
GetQueueStatus
GetClipboardViewer
GetKBCodePage
GetWindowContextHelpId
GetShellWindow
AttachThreadInput
GetInputState
LookupIconIdFromDirectory
GetClassInfoW
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 55KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ