Static task
static1
Behavioral task
behavioral1
Sample
b1941094111e0cbfae15f55dc41a1214_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
b1941094111e0cbfae15f55dc41a1214_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
b1941094111e0cbfae15f55dc41a1214_JaffaCakes118
-
Size
1.3MB
-
MD5
b1941094111e0cbfae15f55dc41a1214
-
SHA1
8971f5afebf0fc513ac6b340ccf4dc0420e652bf
-
SHA256
ef016d788ab196ba4064dc32f67d2438fd9b7454948b5ca78345d675b0c553ae
-
SHA512
26716da3c6deb90a688760a7487ab187ce68e38d014469f431346ddef70509631ac169e72e110f4d0dca734c06ad5ff7013e8ac71a98f402ee0be2d25199c658
-
SSDEEP
24576:AkxPq5jLZRw+lckrbZaF5YDnrsSpJeqeZbS4RAcTr:rCtLEjDr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1941094111e0cbfae15f55dc41a1214_JaffaCakes118
Files
-
b1941094111e0cbfae15f55dc41a1214_JaffaCakes118.exe windows:5 windows x86 arch:x86
2fbbff41cf64b196689b32a80186fab9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
WideCharToMultiByte
GetCPInfo
ExpandEnvironmentStringsW
GetModuleHandleW
GetModuleFileNameW
TlsFree
lstrcmpiW
FormatMessageW
GetStartupInfoA
FileTimeToSystemTime
SystemTimeToFileTime
MulDiv
CloseHandle
SetEndOfFile
ReadFile
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetLastError
GetCurrentThreadId
GetCurrentProcess
VirtualAlloc
GlobalUnlock
GlobalLock
GetProcAddress
uxtheme
GetCurrentThemeName
GetWindowTheme
IsAppThemed
GetThemeColor
DrawThemeText
DrawThemeBackground
CloseThemeData
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
__p__commode
crypt32
CryptMsgUpdate
CryptMsgOpenToDecode
CryptEnumOIDInfo
CryptFindOIDInfo
CryptDecodeObject
CryptDecodeObjectEx
CryptEncodeObject
CertCloseStore
CertEnumCertificatesInStore
CertCreateCertificateContext
CertFreeCertificateContext
CryptMsgGetParam
CertGetCertificateContextProperty
CertAddCertificateContextToStore
CertFreeCTLContext
CertGetPublicKeyLength
CryptHashCertificate
CertVerifyTimeValidity
CertFindExtension
CryptAcquireCertificatePrivateKey
CryptHashPublicKeyInfo
CertNameToStrW
CertGetNameStringW
CryptProtectData
CertSetCertificateContextProperty
CertFreeCertificateChain
CertOpenStore
CertGetCertificateChain
comdlg32
GetFileTitleW
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 6.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nxu3 Size: 372KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.trhw Size: 534KB - Virtual size: 534KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 366KB - Virtual size: 366KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ