Static task
static1
Behavioral task
behavioral1
Sample
07bbe287140b72795b5a5b0e12b544f5_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
07bbe287140b72795b5a5b0e12b544f5_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
07bbe287140b72795b5a5b0e12b544f5_JaffaCakes118
-
Size
150KB
-
MD5
07bbe287140b72795b5a5b0e12b544f5
-
SHA1
370b7427a71a1d1858caa12eeff2a43e2614b5fe
-
SHA256
59a4cd8deda77983c9a615dcc918be43f2921414c80eac7cf6c635114654f44f
-
SHA512
1620ce915dd06357fde1db5023469845a8f7cbeb931f3fb82beb197f7105306a844b49aeef02efb60f21128b6fc578da1e115a9abeb087eb1b9b250edf995db7
-
SSDEEP
3072:HzlHq3Yzrsb+jusJvctwP+hfdbfvnJM7Jp9navPdoqiS:b5FA++hfd7vJMJpcvPt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07bbe287140b72795b5a5b0e12b544f5_JaffaCakes118
Files
-
07bbe287140b72795b5a5b0e12b544f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
5bb87d04044ce66e203eb9f84f5f4247
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
_getch
_ismbblead
_CIsqrt
_setjmp3
_dup2
__set_app_type
_wcsicmp
__p__commode
_acmdln
_initterm
exit
remove
__lc_codepage
_XcptFilter
isdigit
_close
_onexit
_adjust_fdiv
_CIpow
sprintf
__p__fmode
__setusermatherr
_controlfp
__getmainargs
_except_handler3
log10
kernel32
GetSystemDirectoryW
Sleep
SetErrorMode
GetStringTypeA
InterlockedExchange
GetCurrentProcess
GetModuleHandleA
VirtualProtect
GetStartupInfoA
GetStdHandle
GetSystemDefaultLCID
CopyFileA
shell32
SHGetSpecialFolderPathA
CommandLineToArgvW
DoEnvironmentSubstW
SHGetSettings
ExtractIconA
SHGetFolderPathA
SHBrowseForFolderW
SHGetSpecialFolderLocation
Shell_NotifyIconW
oleaut32
SysReAllocStringLen
SafeArrayPtrOfIndex
VariantClear
VariantCopy
SafeArrayCreate
SysAllocStringByteLen
SysStringByteLen
version
VerQueryValueW
VerFindFileW
GetFileVersionInfoSizeW
VerQueryValueA
VerInstallFileW
VerLanguageNameA
GetFileVersionInfoA
ole32
CoTaskMemAlloc
IsAccelerator
DoDragDrop
OleFlushClipboard
CoInitialize
gdi32
GetMetaFileBitsEx
GetBkColor
StretchDIBits
SelectObject
PolyBezierTo
SetMapMode
CreateHalftonePalette
CreateSolidBrush
ExtSelectClipRgn
CreateDCA
GetObjectW
EndDoc
GetCharacterPlacementA
GetViewportOrgEx
user32
SetForegroundWindow
SetRect
GetScrollInfo
GetMenuState
EndDialog
GetSysColorBrush
MessageBoxA
EnableWindow
GetFocus
CheckMenuItem
comctl32
ImageList_Add
ImageList_Draw
CreateStatusWindowA
ImageList_EndDrag
ImageList_Replace
ImageList_SetOverlayImage
InitCommonControls
advapi32
RegDeleteKeyW
RegQueryInfoKeyA
OpenProcessToken
RevertToSelf
RegQueryValueExW
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ