Static task
static1
Behavioral task
behavioral1
Sample
16282995b574f9cd7918a4b3ea4eebcf_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
16282995b574f9cd7918a4b3ea4eebcf_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
16282995b574f9cd7918a4b3ea4eebcf_JaffaCakes118
-
Size
132KB
-
MD5
16282995b574f9cd7918a4b3ea4eebcf
-
SHA1
65b88dc94b74c916a732a1158b22e35d37b5e8da
-
SHA256
4bbdb11eb98edd8999146fad4e952b42fa82f5883528e9e13a1f414e8f457346
-
SHA512
bb5eb5b22962bd76291e2712d62173b60cd5ca9b24ea6564a9fd2362016a48c440bc5b616fc57f98d6e840f2f5680d2c12f4b433f713750561d8bac96944b254
-
SSDEEP
3072:xJLzYgd2SQBTF4ipnOgNqDpQ/9YlCg01R9vkC/zMX33R0/seMB:fdSV8gBRAXxAsP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16282995b574f9cd7918a4b3ea4eebcf_JaffaCakes118
Files
-
16282995b574f9cd7918a4b3ea4eebcf_JaffaCakes118.exe windows:4 windows x86 arch:x86
d2c749675799db8023565db3d5b35d70
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_DragEnter
ImageList_ReplaceIcon
ImageList_DragShowNolock
mscms
UnregisterCMMA
GetColorProfileElement
EnumColorProfilesA
DisassociateColorProfileFromDeviceA
DeleteColorTransform
AssociateColorProfileWithDeviceA
CheckColors
CloseColorProfile
CreateColorTransformA
CreateDeviceLinkProfile
CreateProfileFromLogColorSpaceA
msdmo
DMOEnum
MoInitMediaType
MoFreeMediaType
MoCreateMediaType
MoCopyMediaType
msvcrt
_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
memmove
exit
atol
strlen
fclose
malloc
fseek
fopen
fread
_strdup
_exit
_XcptFilter
_acmdln
_itoa
kernel32
GetStartupInfoA
GetModuleHandleA
lstrcmpA
VerLanguageNameA
WriteConsoleW
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 955KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE