Static task
static1
Behavioral task
behavioral1
Sample
9151fa2ef5467e7f914a109c33507285_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
9151fa2ef5467e7f914a109c33507285_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
9151fa2ef5467e7f914a109c33507285_JaffaCakes118
-
Size
2.4MB
-
MD5
9151fa2ef5467e7f914a109c33507285
-
SHA1
5edb4b66c7247c705796621e9c8f302e6f833644
-
SHA256
1763f529bf9c3eddf9d44ee51bc957f8e7148522a5bd39b30d29a318bb38cd70
-
SHA512
65591f846f025a9cfc62afcc6685d3031e29d43361020b7e58e18a98235c45a736aafb1ec03839ab19ae88198b279d36f5e4d99c7fc8bcd3dbffa08be72b6a95
-
SSDEEP
24576:hlwhvApsyLggLwj/npX9oJW1IkGfxKPwCoxEOm92gS4N20dlg:hlW42xPVoWyb0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9151fa2ef5467e7f914a109c33507285_JaffaCakes118
Files
-
9151fa2ef5467e7f914a109c33507285_JaffaCakes118.exe windows:5 windows x86 arch:x86
285a5fa0d19d8302d00f58b9840f8777
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ClientToScreen
EqualRect
GetScrollRange
GetIconInfo
ActivateKeyboardLayout
LockWindowUpdate
BeginPaint
GetDCEx
DrawTextW
TrackPopupMenuEx
SetMenu
SetTimer
MsgWaitForMultipleObjects
CheckRadioButton
CheckDlgButton
EndDialog
SetWindowPlacement
MoveWindow
DefWindowProcW
ExitWindowsEx
GetKeyboardLayout
GetWindowLongW
kernel32
VirtualAlloc
GetUserDefaultLCID
GetThreadLocale
LCMapStringW
FindNextFileW
FindFirstFileW
CreateFileW
GetTempPathW
lstrcmpW
GetLocalTime
CloseHandle
InitializeCriticalSection
GetLastError
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
wintrust
CryptCATAdminAcquireContext
CryptCATAdminReleaseContext
CryptCATAdminCalcHashFromFileHandle
WTHelperGetProvCertFromChain
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 64.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.1lg38 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ