Static task
static1
Behavioral task
behavioral1
Sample
03a5bdb7ee09aa843f525cc69c0dd54c_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
03a5bdb7ee09aa843f525cc69c0dd54c_JaffaCakes118
-
Size
10KB
-
MD5
03a5bdb7ee09aa843f525cc69c0dd54c
-
SHA1
c384da8d7a25efc5710c99cbb1622b705ff9c0c9
-
SHA256
ee75163c6a82e7e754cca7429a9920d805a7b49300bc7f03c3b4fff67b18e297
-
SHA512
c80d739d4e6a58f143b134052c53171b8cee332bc41721d8d0c2c7b8958f2e4ab5cf76a8f282ab83c79cde3f3fbecadbb8e70213ae62091277333d080c9eeaff
-
SSDEEP
192:pwfb4dI2L91O5BFkxseB3FKAF7lP2CeLVfaoStNBRcODEUPLnWm2CExc8QVk/vNp:jIG94C/KalPeVfadBRc4LR2xQm/vf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 03a5bdb7ee09aa843f525cc69c0dd54c_JaffaCakes118
Files
-
03a5bdb7ee09aa843f525cc69c0dd54c_JaffaCakes118.exe windows:4 windows x86 arch:x86
4754d1fd7b32b6875ba5fd324d7e3d83
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomA
CreateIoCompletionPort
CreateProcessW
EndUpdateResourceA
ExitProcess
FormatMessageW
GetCompressedFileSizeW
GetConsoleCP
GetConsoleScreenBufferInfo
GetCurrentThreadId
GetFileTime
GetLogicalDrives
GetModuleFileNameA
GetNumberFormatW
GetProfileStringW
HeapLock
MoveFileExW
OpenWaitableTimerA
OutputDebugStringW
PrepareTape
ReadConsoleOutputA
ReadFileEx
ReleaseMutex
SetCommConfig
SetProcessShutdownParameters
SwitchToThread
WaitForMultipleObjectsEx
WriteFileGather
lstrlen
advapi32
BackupEventLogW
BuildExplicitAccessWithNameA
BuildSecurityDescriptorA
CloseServiceHandle
ConvertSecurityDescriptorToAccessNamedA
CryptDecrypt
CryptDuplicateHash
CryptDuplicateKey
CryptGetKeyParam
CryptGetProvParam
CryptHashSessionKey
CryptReleaseContext
EnumDependentServicesA
GetFileSecurityA
GetOverlappedAccessResults
MakeSelfRelativeSD
ObjectPrivilegeAuditAlarmW
OpenBackupEventLogW
OpenThreadToken
ReadEventLogA
RegEnumKeyExA
RegNotifyChangeKeyValue
RegQueryMultipleValuesW
RegisterServiceCtrlHandlerA
user32
AlignRects
ChangeMenuW
CreateIconFromResource
CreateWindowExW
EnumPropsExW
GetKeyboardLayoutNameA
GetMessageW
GetShellWindow
GetSubMenu
GetUserObjectInformationW
GetWindowContextHelpId
IMPSetIMEW
InvertRect
IsCharLowerA
IsZoomed
LoadIconA
ModifyMenuA
PostMessageW
RegisterClassA
SendIMEMessageExW
SetMenuItemBitmaps
SetMenuItemInfoA
SetMessageQueue
WINNLSEnableIME
Sections
.text Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ