Static task
static1
Behavioral task
behavioral1
Sample
a70b5dab8a5929498c3662b2246348ee_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a70b5dab8a5929498c3662b2246348ee_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
a70b5dab8a5929498c3662b2246348ee_JaffaCakes118
-
Size
351KB
-
MD5
a70b5dab8a5929498c3662b2246348ee
-
SHA1
ff7d3fa72641da3df35038d7b603d14329913c69
-
SHA256
c2fa367714c4c83860532136f2c6ec7519bbfd1c177a2fc1d02ffdab40fc9ead
-
SHA512
d241a725ad3f388e22895af45818812f414b774d9c67d57f8e524f08a0ecbf84754c1a5f99d4db51e7ab651fce0c138905568ca61b20d5abe82135fda67f277a
-
SSDEEP
6144:dOH7owoxfZMSHMdEyXD1DkoMBulp/vmhGAgcPVdHel3D:dOH7poBxeZD7MBuLmGA56T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource a70b5dab8a5929498c3662b2246348ee_JaffaCakes118
Files
-
a70b5dab8a5929498c3662b2246348ee_JaffaCakes118.exe windows:4 windows x86 arch:x86
576f19a4febda13fa504034211eb9578
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegDisablePredefinedCache
kernel32
LoadResource
CreateProcessW
SearchPathA
GlobalAlloc
ExpandEnvironmentStringsW
CloseHandle
LoadLibraryA
EnumResourceNamesA
GetProcAddress
SizeofResource
ExitProcess
GetWindowsDirectoryW
LoadLibraryExW
lstrlenW
LockResource
WaitForSingleObject
lstrlenA
ExpandEnvironmentStringsA
MulDiv
GlobalFree
FindResourceA
GetProcessHeap
CreateProcessA
GetModuleHandleA
SearchPathW
LoadLibraryExA
FreeLibrary
user32
GetCursorPos
MessageBoxW
PostMessageA
SetActiveWindow
LoadCursorA
TrackPopupMenu
CreateDialogParamW
GetWindowTextW
ClientToScreen
GetSysColor
EnableMenuItem
SetTimer
RegisterClassW
SetWindowTextA
InvalidateRect
IsWindowVisible
SendMessageA
ReleaseDC
CreateIconIndirect
DefWindowProcW
UnregisterClassA
ScreenToClient
DestroyWindow
SetDlgItemTextW
GetSubMenu
CreateIconFromResourceEx
GetWindowLongW
GetMenuStringW
GetWindowTextA
DestroyIcon
CallWindowProcW
GetMenuState
DefWindowProcA
GetDC
GetWindowLongA
GetSystemMetrics
SetWindowPos
LookupIconIdFromDirectoryEx
CreateDialogParamA
RegisterClassA
UpdateWindow
GetDlgItem
SetWindowLongW
CreateWindowExW
SetDlgItemTextA
SetWindowLongA
CallWindowProcA
LoadImageA
KillTimer
GetKeyState
GetMenuStringA
CreateWindowExA
UnregisterClassW
GetIconInfo
LoadImageW
SetWindowTextW
gdi32
SetDIBits
DeleteObject
GetObjectA
GetDIBits
GetDeviceCaps
comctl32
ImageList_Create
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_Destroy
Sections
.text Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 143KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 512B - Virtual size: 54B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE