Static task
static1
Behavioral task
behavioral1
Sample
1a1ae02121a63a28ac79c159be864b29_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1a1ae02121a63a28ac79c159be864b29_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1a1ae02121a63a28ac79c159be864b29_JaffaCakes118
-
Size
267KB
-
MD5
1a1ae02121a63a28ac79c159be864b29
-
SHA1
d8c345daed8ac4495ec56bb185468537d9d485c0
-
SHA256
b93de17791b1c4718342ad48d1751fba49df8326f7cc417ae834ee0b98e24586
-
SHA512
09a3215b7cee9352a75ae269cdc0637cbf3fe0b15d99fed707d2d7cc9e3100680b57770559c9b044a1c4b588093767d67baa1a43cf86e017319a0231bae7ec52
-
SSDEEP
6144:vllslxMfjmxPA2XK/l78oJ5sXXZnW4j9NY:olEqxPlX078oJOZnd9NY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a1ae02121a63a28ac79c159be864b29_JaffaCakes118
Files
-
1a1ae02121a63a28ac79c159be864b29_JaffaCakes118.exe windows:4 windows x86 arch:x86
be8c8338d08f9483a98f0b7111b1b9a3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
GetLastError
GetTickCount
GetCurrentProcess
MultiByteToWideChar
GetSystemDirectoryW
GetVersionExA
GetProcessHeap
GetStartupInfoW
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsAlloc
GetCurrentThreadId
HeapCreate
ExitProcess
GetModuleFileNameA
GetEnvironmentStringsW
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetStringTypeA
GetStringTypeW
Sleep
GetLocaleInfoA
InitializeCriticalSection
LoadLibraryA
CreateMutexW
GetProcAddress
user32
GetSystemMetrics
IsWindow
CharLowerW
GetMenuItemRect
SetMenu
SendDlgItemMessageW
LoadCursorW
GetTopWindow
CreateDialogIndirectParamA
GetClassInfoW
LoadMenuIndirectA
IsDlgButtonChecked
LoadMenuW
LoadBitmapA
ShowCaret
RegisterWindowMessageA
AdjustWindowRect
RegisterWindowMessageW
SetTimer
GetCapture
ActivateKeyboardLayout
SetForegroundWindow
GetMenuItemCount
EndDialog
SetWindowTextA
GetClassInfoExW
GetIconInfo
GetMenuStringA
DialogBoxIndirectParamA
GetActiveWindow
IsMenu
GetMenuStringW
advapi32
RegSetValueExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegDeleteKeyW
CloseServiceHandle
StartServiceW
OpenServiceW
OpenSCManagerW
mssip32
CryptSIPGetSignedDataMsg
CryptSIPGetRegWorkingFlags
gdi32
CreateBitmapIndirect
UpdateICMRegKeyA
CreatePalette
CreateDIBSection
CreateFontIndirectExA
RemoveFontResourceW
UpdateICMRegKeyW
TranslateCharsetInfo
CreatePolyPolygonRgn
GetTextExtentPointA
ifmon
InitHelperDll
Sections
CODE Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Gl Size: 2KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.QOuSCV Size: 2KB - Virtual size: 239KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 82KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.LMER Size: 3KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 132KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.YkpSJz Size: 512B - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gc Size: 5KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ