Static task
static1
Behavioral task
behavioral1
Sample
91a0ae4987894f1f5ebf76bcf007c411_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
91a0ae4987894f1f5ebf76bcf007c411_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
91a0ae4987894f1f5ebf76bcf007c411_JaffaCakes118
-
Size
955KB
-
MD5
91a0ae4987894f1f5ebf76bcf007c411
-
SHA1
e0f1c05a121e08fe06aea983b030be04d182e92f
-
SHA256
09dbef5635ef4b1a40c9c3d661497ea8ef66a5e53e5abce17d33163cc29247ef
-
SHA512
25a5e14b593df943eab9909d48d19499afd41c1c6e9a5b2e9f3aadecd8911cfc4e92b0170310bf3a9c1b1d4d95a4d1b7c7419290a93965f4230b744a77db1f81
-
SSDEEP
24576:iM7XUB8teeT2rzEYyUVNi0ff2I0KBj4R5xvq9TGSTHMc/1:BIyYysY0ffvZBjLGOV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 91a0ae4987894f1f5ebf76bcf007c411_JaffaCakes118
Files
-
91a0ae4987894f1f5ebf76bcf007c411_JaffaCakes118.exe windows:5 windows x86 arch:x86
199ff2b560079c19dd4233103e3f2a55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
user32
BringWindowToTop
DestroyCursor
LoadCursorW
EqualRect
MapWindowPoints
ScreenToClient
HideCaret
EndPaint
SetForegroundWindow
CreateMenu
SetFocus
GetDialogBaseUnits
DispatchMessageW
SendMessageTimeoutW
PostThreadMessageW
IsWindow
GetDlgItemInt
msvcrt
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
exit
_except_handler3
_controlfp
__set_app_type
_XcptFilter
_exit
_wcmdln
kernel32
GetLastError
GetStartupInfoW
GetUserDefaultLCID
GetThreadLocale
WideCharToMultiByte
FindFirstFileW
CreateDirectoryW
FindResourceExW
GetModuleHandleW
GetModuleFileNameW
CreateMutexW
CloseHandle
VirtualAlloc
GetProcAddress
GetFileType
GetCurrentProcess
wininet
HttpSendRequestW
InternetConnectW
InternetCrackUrlW
HttpQueryInfoW
comdlg32
CommDlgExtendedError
ChooseFontW
ReplaceTextW
GetOpenFileNameW
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.h948 Size: 929KB - Virtual size: 928KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ