Static task
static1
Behavioral task
behavioral1
Sample
09b2f36b144fde91221d31e93b9eb466_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
09b2f36b144fde91221d31e93b9eb466_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
09b2f36b144fde91221d31e93b9eb466_JaffaCakes118
-
Size
125KB
-
MD5
09b2f36b144fde91221d31e93b9eb466
-
SHA1
36ac8304812c02001d04825f890f8edec53fb852
-
SHA256
376afa2db1d165a97d7d6a7af33c9e282b51f5c134e629cc84266c04e92dc186
-
SHA512
1128d3e3d1e7bd9fc628cd235a28f085b20f822e48946b98a305dd67de5d2a3cc7be9a83acfbbaa2af6e43a3ce2534cb35ecca397af40924b04731e9238e4eda
-
SSDEEP
3072:7SNw0e5OMTewbQIKdMXfVjndF0F6WfNJam624oIXESq9:ZMIKdmOFPv4zoIRY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09b2f36b144fde91221d31e93b9eb466_JaffaCakes118
Files
-
09b2f36b144fde91221d31e93b9eb466_JaffaCakes118.exe windows:5 windows x86 arch:x86
6bd3c2ebb867310d30a4b97d42557979
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetSystemTimeAsFileTime
VirtualProtect
GetModuleHandleA
WaitForMultipleObjects
VirtualFree
GetStartupInfoA
FlushFileBuffers
GetCommandLineW
MulDiv
CreateFileMappingA
IsBadCodePtr
GetModuleHandleW
MoveFileA
msvcrt
_getch
_mkdir
sscanf
_cexit
_controlfp
_XcptFilter
towupper
fflush
fputs
swscanf
fseek
_purecall
__p__fmode
__setusermatherr
_acmdln
strncpy
log
_except_handler3
__set_app_type
isxdigit
_exit
__getmainargs
exit
_initterm
toupper
_adjust_fdiv
__p__commode
__CxxFrameHandler
user32
GetKeyboardType
EnumThreadWindows
LoadCursorA
EndPaint
UpdateWindow
DeleteMenu
GetIconInfo
GetWindow
GetDesktopWindow
version
GetFileVersionInfoA
GetFileVersionInfoW
GetFileVersionInfoSizeA
VerLanguageNameA
oleaut32
SafeArrayGetUBound
VariantInit
VariantCopyInd
SysAllocStringByteLen
GetActiveObject
SafeArrayGetElement
SysStringLen
SafeArrayPutElement
shell32
SHBrowseForFolder
SHGetMalloc
SHFileOperationW
SHBindToParent
SHGetSettings
SHBrowseForFolderW
SHGetFileInfo
ExtractAssociatedIconW
SHGetDesktopFolder
ExtractIconExA
ShellExecuteEx
ole32
CreateStreamOnHGlobal
OleUninitialize
CoRevokeClassObject
CoGetMalloc
PropVariantClear
CreateBindCtx
CoTaskMemFree
gdi32
StartDocW
ScaleWindowExtEx
GetObjectType
EnumMetaFile
BitBlt
IntersectClipRect
GetStockObject
advapi32
RegQueryValueExA
AllocateAndInitializeSid
RegCreateKeyA
RegCreateKeyExW
CheckTokenMembership
RegFlushKey
RegDeleteKeyW
DeleteService
comctl32
ImageList_Write
ImageList_ReplaceIcon
ImageList_Remove
ImageList_EndDrag
ImageList_DragLeave
ImageList_SetOverlayImage
ImageList_Add
PropertySheetW
CreatePropertySheetPageW
ImageList_Replace
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ