Static task
static1
Behavioral task
behavioral1
Sample
07f6ef48e03a2c8e450ec003015aab88_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
07f6ef48e03a2c8e450ec003015aab88_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
07f6ef48e03a2c8e450ec003015aab88_JaffaCakes118
-
Size
80KB
-
MD5
07f6ef48e03a2c8e450ec003015aab88
-
SHA1
84f9d61d8ad586ec77548e21f3eedfad35f5164b
-
SHA256
1faa531104d844c35883f862412e75279335a6dbbbc548b3fe627d68fcbdbc68
-
SHA512
e11381a3fe9ba07764dd54963a68ad5d944167debd2e708434343f97c8bbc16eb215ed86d3456b1851bb75131669d63fd8de0d4f1f2538c5d5cc601211079fbd
-
SSDEEP
768:6Cp5+MSXz6InZ/Mgq+/E/co1K3cy+6pIHoM9fKOBcxCISA2aD+DUY7GfEW7H2Uo3:62YD6m5MNbfwzMQOm0X6YwEW6UoSGz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07f6ef48e03a2c8e450ec003015aab88_JaffaCakes118
Files
-
07f6ef48e03a2c8e450ec003015aab88_JaffaCakes118.exe windows:4 windows x86 arch:x86
873e59b1161803095cf91a308dc5dbc5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedIncrement
HeapAlloc
GetSystemInfo
GetVersionExA
HeapCreate
lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
lstrcpynA
IsDBCSLeadByte
HeapDestroy
GetProcAddress
LoadLibraryA
lstrcpyA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetLocalTime
GetTickCount
ResetEvent
ReleaseMutex
OpenMutexA
GetStartupInfoA
ExitProcess
DebugBreak
HeapReAlloc
HeapFree
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
InitializeCriticalSection
GetCommandLineA
GetCurrentThreadId
lstrcmpiA
Sleep
CreateEventA
SetEvent
CreateThread
WaitForSingleObject
CloseHandle
InterlockedDecrement
lstrcatA
RtlUnwind
SetStdHandle
GetCurrentProcess
TerminateProcess
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
WriteFile
GetStdHandle
SetFilePointer
user32
CharNextA
DispatchMessageA
GetMessageA
LoadStringA
PostThreadMessageA
advapi32
RegSetValueExA
RegQueryValueExA
RegFlushKey
RegEnumValueA
RegQueryInfoKeyA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
ole32
CoTaskMemRealloc
CoTaskMemAlloc
CoRegisterClassObject
CoInitialize
CoUninitialize
CoRevokeClassObject
CoCreateInstance
ProgIDFromCLSID
CoMarshalInterThreadInterfaceInStream
CoUnmarshalInterface
CoTaskMemFree
oleaut32
SysAllocStringLen
SetErrorInfo
CreateErrorInfo
SysStringLen
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
SysAllocString
VarUI4FromStr
SysFreeString
Sections
.text Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ