Static task
static1
Behavioral task
behavioral1
Sample
228de7bfd215539694a10a584d1bca66_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
228de7bfd215539694a10a584d1bca66_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
228de7bfd215539694a10a584d1bca66_JaffaCakes118
-
Size
541KB
-
MD5
228de7bfd215539694a10a584d1bca66
-
SHA1
ac357561d2e85f1a9e3128d52c69128a8abf90ff
-
SHA256
40bbfa62b7e85794a4eb654e85d52a002d2d39f9dde3b4e4ec502798a3183561
-
SHA512
700082ff81ea3084c47cebcdf54ddc77f06d9d52360981f8b997ebb39336949c87634055ac1aad8076b9e367537547c3bf8b1f8dca326ec4aa4f83c1479ac9fe
-
SSDEEP
12288:mapxYoTeyMU+2+A9xo6iPP8LWTOijoEELbcAZkHCMJNj47oP:m+aoTR3UP8dijo3EAaHC8qo
Malware Config
Signatures
-
Molebox Virtualization software 1 IoCs
Detects file using Molebox Virtualization software.
resource yara_rule sample molebox -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 228de7bfd215539694a10a584d1bca66_JaffaCakes118
Files
-
228de7bfd215539694a10a584d1bca66_JaffaCakes118.exe windows:4 windows x86 arch:x86
d307a02cb26f0b1b51247da12b1870a5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegCloseKey
RegCreateKeyA
RegEnumValueW
RegOpenKeyExW
RegOpenKeyW
RegSetValueW
kernel32
CloseHandle
ConvertThreadToFiber
CreateThread
EnterCriticalSection
ExitProcess
InitializeCriticalSection
SetUnhandledExceptionFilter
TlsAlloc
TlsFree
TlsGetValue
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
memcpy
signal
strcpy
wcscpy
user32
AdjustWindowRectEx
ChangeDisplaySettingsW
CheckMenuRadioItem
CloseClipboard
CopyRect
DefFrameProcW
DefWindowProcW
DestroyCursor
DestroyIcon
DestroyWindow
DrawFrameControl
EnumWindows
GetAsyncKeyState
GetClassNameW
GetClipboardFormatNameW
GetDC
GetDlgItem
GetForegroundWindow
GetIconInfo
GetMenuState
GetMessagePos
GetSystemMetrics
GetUpdateRect
GetWindow
GetWindowTextW
InflateRect
IsIconic
LoadCursorW
LoadImageW
MapWindowPoints
MsgWaitForMultipleObjects
PeekMessageW
PostQuitMessage
PostThreadMessageW
RemoveMenu
SetClipboardData
SetForegroundWindow
SetParent
SetScrollInfo
SetWindowTextW
SetWindowsHookExW
ShowWindow
TranslateMDISysAccel
TranslateMessage
UpdateWindow
ValidateRect
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 156B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 762KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 2KB - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ