Static task
static1
Behavioral task
behavioral1
Sample
22bb6a012d57438bcfd8e07b2095b25a_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
22bb6a012d57438bcfd8e07b2095b25a_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
22bb6a012d57438bcfd8e07b2095b25a_JaffaCakes118
-
Size
185KB
-
MD5
22bb6a012d57438bcfd8e07b2095b25a
-
SHA1
ad1251efda9f84d2bb3fadffbc730a8997a7482d
-
SHA256
41497894ebffb969c0b523e1d09f13539b01ac685e71803759f881c96551c2a4
-
SHA512
0c60f473937ca88ecbf8456f19f9a4b3c919fbd88fb30335cd5cfe7dc459f998f8d044b32f7f19690510110e5ec2a44ab713af6683d5a6f38434492c2e01c339
-
SSDEEP
3072:VzFIWrpnBLaXFl1GQygd03eASOilnrYD7clL6TwOCkr2PHQfN2MxKdJvlf:VTr+FObnTilnrWwleTwOCkiPw8CK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22bb6a012d57438bcfd8e07b2095b25a_JaffaCakes118
Files
-
22bb6a012d57438bcfd8e07b2095b25a_JaffaCakes118.exe windows:4 windows x86 arch:x86
3e913034aed927b641b48a14f73a0725
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
shell32
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ole32
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID
kernel32
SetTapeParameters
GetCurrentProcessId
ClearCommError
InterlockedExchange
GetLocalTime
GetWindowsDirectoryA
GetVersion
EnumResourceNamesA
FindClose
ExitProcess
Sleep
FindFirstFileA
oleacc
LresultFromObject
CreateStdAccessibleObject
advapi32
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegEnumKeyExA
RegOpenKeyA
RegQueryValueExA
RegDeleteKeyA
RegSetValueExA
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
user32
GetWindowInfo
SetWindowPos
IsWindow
FillRect
SetWindowLongA
MoveWindow
ReleaseCapture
GetDC
GetDlgItem
SetCursor
ReleaseDC
LoadCursorA
GetSysColor
GetWindowLongA
SetCapture
winmm
mciSendCommandA
sndPlaySoundA
gdi32
GetDeviceCaps
SetTextColor
SetBkMode
SaveDC
CreateSolidBrush
BitBlt
DeleteDC
EnumFontFamiliesExA
CreateCompatibleDC
GetStockObject
TextOutA
Rectangle
SelectObject
DeleteObject
DeleteMetaFile
RestoreDC
CreateFontIndirectA
GetObjectA
CreateRectRgn
GetTextExtentPoint32A
CreateCompatibleBitmap
Sections
.text Size: 157KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lib Size: 512B - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ