Static task
static1
Behavioral task
behavioral1
Sample
18ee4493dab871f09f27fcd5c44cfb5a_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
18ee4493dab871f09f27fcd5c44cfb5a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
18ee4493dab871f09f27fcd5c44cfb5a_JaffaCakes118
-
Size
148KB
-
MD5
18ee4493dab871f09f27fcd5c44cfb5a
-
SHA1
046ba868b107b8d7343e277a5228b04868a767ee
-
SHA256
5eaa525ef78ff14331fae3cf55cb526c040b47bdc431bd3341c8aeaa417a292a
-
SHA512
a1ccb92af4f95627005520b3a4337a167cb97b490e36cae25ec70081ebef16bcc166cedbcd472477b37ba8de59042f2c26c6c7de525b694c1e9c9db3f4379a39
-
SSDEEP
3072:SJfWhhTwlNzlYsCeMtSYCzZViIvAtBKlmtFzyfK11ti5s/H7:6uhhTwXysMoYCniftBK8tFW4IE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18ee4493dab871f09f27fcd5c44cfb5a_JaffaCakes118
Files
-
18ee4493dab871f09f27fcd5c44cfb5a_JaffaCakes118.exe windows:4 windows x86 arch:x86
43d307e461779fcd43b4bf07bd94ed0f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoTaskMemFree
CoUninitialize
ReleaseStgMedium
CreateBindCtx
MkParseDisplayName
CoDisconnectObject
WriteClassStm
CoGetContextToken
StgCreateDocfileOnILockBytes
shell32
SHGetFolderPathA
oleaut32
GetErrorInfo
SysFreeString
SafeArrayUnaccessData
SafeArrayPtrOfIndex
VariantCopyInd
kernel32
IsBadHugeReadPtr
ExitProcess
lstrlenW
GlobalAlloc
GetCommandLineA
GetOEMCP
LoadLibraryA
GetProcAddress
ExitThread
IsBadReadPtr
GetModuleHandleA
VirtualAllocEx
VirtualAlloc
LoadLibraryExA
user32
GetTopWindow
GetLastActivePopup
GetWindowLongW
GetMenuState
GetKeyboardLayoutNameA
GetKeyNameTextA
GetSysColorBrush
GetWindowLongA
GetKeyboardType
GetMenuItemInfoA
GetSystemMenu
GetKeyboardLayoutList
GetMenuItemCount
GetIconInfo
GetKeyboardState
GetPropA
GetWindowDC
GetScrollPos
GetKeyboardLayout
GetScrollRange
GetMenuItemID
GetWindow
GetSysColor
GetKeyState
GetMessagePos
GetSubMenu
GetParent
GetScrollInfo
GetMenuStringA
GetMenu
Sections
CODE Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 593B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ddata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ