Static task
static1
Behavioral task
behavioral1
Sample
18a637fce357805abf0004f1075cb142_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
18a637fce357805abf0004f1075cb142_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
18a637fce357805abf0004f1075cb142_JaffaCakes118
-
Size
138KB
-
MD5
18a637fce357805abf0004f1075cb142
-
SHA1
0ee04eee6a0dfcdda57bd966df6d6749e772ade3
-
SHA256
5d283d50e451df8a519295bc2c09b0d817bb17ed250a23034598908e8e900e36
-
SHA512
b11581d48587f65b0d156badcd4b96d3c10591b2eb42d6dfd60241151786724f1a8a5460e3bae4c76db503feec1c4a76b06b1ac9a182dd19c5a6fa1b44218541
-
SSDEEP
3072:znPD1zXBoUXwgQmDjA57PEw2UaMNgPdlOSGTh866:lRUmDjAP0lOSGTa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18a637fce357805abf0004f1075cb142_JaffaCakes118
Files
-
18a637fce357805abf0004f1075cb142_JaffaCakes118.exe windows:5 windows x86 arch:x86
d6f3517a176a0c9829cd7be96bec41ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetLastError
GetStringTypeExA
GetFileType
GlobalLock
VirtualProtect
GetStartupInfoA
GetModuleHandleA
GetFileTime
SetHandleCount
SetEnvironmentVariableA
msvcrt
_pipe
__p__commode
isspace
__getmainargs
__lc_codepage
log
wcsncpy
getenv
_initterm
_acmdln
_adjust_fdiv
_amsg_exit
_chmod
__set_app_type
_XcptFilter
__setusermatherr
_controlfp
_except_handler3
_fullpath
__p__fmode
_getch
exit
shell32
SHGetFolderPathW
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetPathFromIDListW
SHGetFolderLocation
SHGetSpecialFolderPathW
ExtractAssociatedIconW
ShellExecuteEx
SHFileOperationA
SHCreateDirectoryExW
advapi32
RegEnumKeyExW
RegEnumKeyExA
RegQueryInfoKeyA
RegCloseKey
RegQueryValueA
GetTokenInformation
CryptAcquireContextA
RegEnumValueA
CryptGenRandom
DeleteService
RegQueryValueExA
OpenServiceW
RegOpenKeyExA
RegOpenKeyA
oleaut32
SafeArrayPutElement
SafeArrayGetUBound
SysReAllocStringLen
VariantCopyInd
SafeArrayUnaccessData
SysAllocStringLen
CreateErrorInfo
gdi32
GetTextExtentPoint32A
GetTextExtentPoint32W
CreateCompatibleBitmap
GetWindowExtEx
CreateBitmap
CreateRectRgn
TranslateCharsetInfo
AbortDoc
SetDIBits
PolylineTo
SetROP2
SetDIBitsToDevice
CreateFontIndirectA
CreatePenIndirect
ole32
CoLoadLibrary
PropVariantClear
IsEqualGUID
CoTaskMemRealloc
CoRevokeClassObject
OleIsCurrentClipboard
CoDisconnectObject
user32
PostQuitMessage
WaitMessage
EqualRect
WindowFromPoint
GetCapture
SetPropA
DrawIcon
SetScrollInfo
comctl32
ImageList_SetIconSize
ImageList_BeginDrag
ImageList_GetBkColor
DestroyPropertySheetPage
ImageList_SetBkColor
ImageList_SetImageCount
ImageList_AddMasked
CreateStatusWindowA
version
GetFileVersionInfoW
GetFileVersionInfoSizeA
VerInstallFileA
GetFileVersionInfoSizeW
VerFindFileW
VerQueryValueW
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ