Static task
static1
Behavioral task
behavioral1
Sample
03581e5f0aab446eaac46236ccbbade6_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
03581e5f0aab446eaac46236ccbbade6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
03581e5f0aab446eaac46236ccbbade6_JaffaCakes118
-
Size
254KB
-
MD5
03581e5f0aab446eaac46236ccbbade6
-
SHA1
a7763db0489f724f539ff12fca1cc0e4ec9189d4
-
SHA256
b0530ef7f3c604e38c22021b234029ef5348edd3e97682c70a54628864293131
-
SHA512
004c11cfcb2ed9dc3d49062a5095cc5bb8197c7123273310fd6c238ce129183789b4271f99ac7e478cc7b970321adb55be17b2ad79397a91608bee1264be1e9a
-
SSDEEP
3072:b/w6gCmvZZ1g9nTR61F/tNnr4U7BRScmJ8Re1YBRyD+4KABiQ3AwZI9tBkPL/Z27:7wVhk8cgSVLaGD8bQNZqU/Zq7Pmyjrx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03581e5f0aab446eaac46236ccbbade6_JaffaCakes118
Files
-
03581e5f0aab446eaac46236ccbbade6_JaffaCakes118.exe windows:4 windows x86 arch:x86
6ad2f82b8ad02523c94a5d495b2dab38
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
PatBlt
GetObjectW
CreateDCW
CreateSolidBrush
SelectObject
CreateCompatibleBitmap
DeleteDC
CreateCompatibleDC
DeleteObject
kernel32
LeaveCriticalSection
HeapFree
IsDebuggerPresent
LockResource
EnterCriticalSection
lstrcmpiW
HeapSize
GetModuleHandleW
CreateFileW
RaiseException
GetFileSize
SystemTimeToTzSpecificLocalTime
DeleteCriticalSection
FindClose
LocalAlloc
FindFirstFileW
lstrlenW
GetTimeZoneInformation
FormatMessageW
UnhandledExceptionFilter
EnumResourceNamesW
SizeofResource
GetCurrentThreadId
FindResourceExW
GetSystemTime
LoadResource
FindResourceW
HeapDestroy
LocalFree
HeapAlloc
GetSystemTimeAsFileTime
ReadFile
SetUnhandledExceptionFilter
OutputDebugStringW
FreeLibrary
ProcessIdToSessionId
GetProcessHeap
CloseHandle
HeapReAlloc
SystemTimeToFileTime
LoadLibraryExW
CompareFileTime
VirtualAllocEx
ole32
CoTaskMemRealloc
CoCreateGuid
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
oleaut32
VarUI4FromStr
user32
CharNextW
GetForegroundWindow
AllowSetForegroundWindow
DestroyIcon
GetSystemMetrics
GetDesktopWindow
DrawIconEx
GetActiveWindow
LoadImageW
esent
JetFreeBuffer
JetCloseFile
JetDupCursor
JetGetDatabaseFileInfo
JetCreateDatabase2
JetMakeKey
JetCreateInstance
JetDefragment
JetSetLS
JetOpenTempTable3
JetAddColumn
JetInit2
JetEnumerateColumns
JetTerm2
JetDeleteIndex
JetMove
ese
wmpshell
DllRegisterServer
DllCanUnloadNow
Sections
.YolX Size: 1KB - Virtual size: 27KB
IMAGE_SCN_MEM_READ
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UrnGiP Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.awBQJUL Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.slUCrgA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.GdUqi Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 208KB - Virtual size: 207KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fvTRZ Size: 1024B - Virtual size: 790B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mHTN Size: 512B - Virtual size: 396B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.GjQNcMz Size: 512B - Virtual size: 266B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ZJhdvo Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sIVhg Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE