Static task
static1
Behavioral task
behavioral1
Sample
154f0ae894ecb5ebd7c797147c6243d9_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
154f0ae894ecb5ebd7c797147c6243d9_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
154f0ae894ecb5ebd7c797147c6243d9_JaffaCakes118
-
Size
930KB
-
MD5
154f0ae894ecb5ebd7c797147c6243d9
-
SHA1
641eff61f35df53b59f25e89173bdc538328202f
-
SHA256
09ac30892fa5a9905bc088c966feb5afbc8076d8c195527af2527f08ad823752
-
SHA512
60ffd42ac142c2927dc5c0630fa412123493952ed992f8d38ae3173f53163b635762e2c7feb25d6f3d74c95719dccf7569b1da2b7ff3d5ab066dcbc32617406b
-
SSDEEP
12288:vjutrzh9xOXkWp9ufWG7txDtQ4UeoD+UzgusnDw+JLkJ/n:vjutr5OUWvuN7tltzNoaUtE+d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 154f0ae894ecb5ebd7c797147c6243d9_JaffaCakes118
Files
-
154f0ae894ecb5ebd7c797147c6243d9_JaffaCakes118.exe .js windows:4 windows x86 arch:x86 polyglot
5f1e52b4084dbe28f7315d07d9fbdcf7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
TerminateProcess
GetProcAddress
LoadLibraryA
IsBadWritePtr
MultiByteToWideChar
InterlockedDecrement
GetModuleFileNameA
GetVersionExA
GetEnvironmentVariableA
GetModuleHandleA
HeapFree
HeapAlloc
GetCommandLineA
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
HeapCreate
HeapDestroy
VirtualAlloc
VirtualFree
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
ExitProcess
GetVersion
GetStartupInfoA
RaiseException
RtlUnwind
HeapReAlloc
lstrcpynA
GetLastError
LocalFree
SetFilePointer
WriteFile
CloseHandle
WideCharToMultiByte
lstrlenA
user32
LoadCursorA
LoadIconA
CreateWindowExA
ShowWindow
DrawTextA
RegisterClassExA
EndDialog
BeginPaint
GetClientRect
EndPaint
PostQuitMessage
DefWindowProcA
DestroyWindow
DialogBoxParamA
SetTimer
KillTimer
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
ole32
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoInitialize
oleaut32
VariantInit
SysFreeString
SysAllocStringLen
SysAllocString
VariantClear
Sections
.text Size: 512KB - Virtual size: 512KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE