Static task
static1
Behavioral task
behavioral1
Sample
16851e27cb69503a58d0b529be90e696_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
16851e27cb69503a58d0b529be90e696_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
16851e27cb69503a58d0b529be90e696_JaffaCakes118
-
Size
200KB
-
MD5
16851e27cb69503a58d0b529be90e696
-
SHA1
3b9b3f0fe818817a82a9c88dda6af9db59af3634
-
SHA256
268e4e1c4e61bc89283c93047d0fba862924f7ddf7df392113227da395c85fc8
-
SHA512
2cf701f1125b570049fe2a570ef7cd904e310100ff1010fc355e181464a5d952138291dd4196ae76b9748f71edc4b6dc990d198cb0a1e72482b01e7701faf77c
-
SSDEEP
6144:NLw6Ecbi9sFJ0qmzpuzbYrSTNDdp5mOeWzvSXZHM:NLw6/bi99qmuUrGp3epH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16851e27cb69503a58d0b529be90e696_JaffaCakes118
Files
-
16851e27cb69503a58d0b529be90e696_JaffaCakes118.exe windows:5 windows x86 arch:x86
d9456ce25c77d4f6fb9226c356ef19b1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
HeapSize
FileTimeToLocalFileTime
GetCommandLineA
FileTimeToSystemTime
LCMapStringW
LockResource
TerminateProcess
GlobalLock
GetTimeFormatA
GlobalSize
GetStartupInfoW
SetPriorityClass
InterlockedDecrement
HeapFree
GetVersion
CloseHandle
SetLastError
UnhandledExceptionFilter
VirtualAlloc
GetLocaleInfoW
VirtualFree
GlobalAlloc
GetSystemDefaultLCID
GetStartupInfoA
GetCommandLineW
GetThreadLocale
GetACP
Sleep
lstrcmpA
GetFileAttributesA
GetModuleHandleA
ntdll
RtlInitUnicodeString
NtQueryInformationFile
RtlCreateTimer
NtCreateTimer
NtResumeThread
NtProtectVirtualMemory
RtlCancelTimer
ZwSetEvent
msasocls
_Strcoll
_FCosh
_Dnorm
_Cosh
_Xbig
_Wcrtomb
_LExp
_Exp
advapi32
RegSetValueExA
RegOpenKeyA
ole32
CoRevokeClassObject
OleRegEnumVerbs
OleQueryCreateFromData
OleMetafilePictFromIconAndLabel
StgCreateDocfile
OleGetIconOfFile
OleUninitialize
WriteFmtUserTypeStg
gdi32
CreatePen
GetSystemPaletteUse
PlayMetaFileRecord
GetViewportOrgEx
GetTextFaceA
DeleteEnhMetaFile
FillRgn
TextOutA
GetFontData
CreateRectRgn
GetClipRgn
GetEnhMetaFileBits
CreateCompatibleBitmap
GetNearestColor
GetTextAlign
user32
RegisterWindowMessageA
SetScrollInfo
GetMessageTime
DrawFrameControl
EndPaint
GetSysColor
PostMessageA
GetMessagePos
UnionRect
SetFocus
SetScrollRange
ScrollDC
OffsetRect
SetCursor
SetWindowTextW
ChildWindowFromPoint
GetDC
GetScrollRange
GetParent
GetWindowLongA
DestroyCursor
SetTimer
ValidateRect
CopyRect
RegisterClassExA
SetWindowPos
DefWindowProcW
ChangeClipboardChain
InvertRect
IsIconic
DefMDIChildProcA
TranslateAcceleratorA
IsWindowEnabled
wsprintfA
MessageBoxA
RegisterClassExW
SetActiveWindow
Sections
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 145KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ