Static task
static1
Behavioral task
behavioral1
Sample
22ae6397c4aa66f1ae4a06bb88d42dd8_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
22ae6397c4aa66f1ae4a06bb88d42dd8_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
22ae6397c4aa66f1ae4a06bb88d42dd8_JaffaCakes118
-
Size
142KB
-
MD5
22ae6397c4aa66f1ae4a06bb88d42dd8
-
SHA1
d143b4d881b3b6ee7552a03297a6bcc47883b39c
-
SHA256
29ab45377b6fcfa10b1d94c0198aae3cf37354fd45eb632211688b82777ffc8f
-
SHA512
18c276ad0f1ebce616d0880499d0f6147502e584199f630f850c0c069caa8df82aaaf9862c19dcd729b48f0a190c2fa781b2dfacaf853686b96c961bed0df4d5
-
SSDEEP
3072:QAqpqHwxvGvgSSEj7KDfb8yUWI3sX6LYsO7jPQs10b8N9i41Dt:QFNWj7Sb8yVIOaO7jnRfiGp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22ae6397c4aa66f1ae4a06bb88d42dd8_JaffaCakes118
Files
-
22ae6397c4aa66f1ae4a06bb88d42dd8_JaffaCakes118.exe windows:4 windows x86 arch:x86
a550d34b80ee8cd654099d3245764c53
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetErrorMode
VirtualProtect
GetModuleHandleA
IsDebuggerPresent
GetStartupInfoA
MulDiv
GlobalAlloc
GetStringTypeW
SetCurrentDirectoryA
GetFileAttributesW
GetVersionExW
CopyFileA
GetModuleHandleW
GetOEMCP
GetEnvironmentStrings
msvcrt
memchr
_XcptFilter
_acmdln
_initterm
__getmainargs
_adjust_fdiv
_vsnwprintf
_setmode
__setusermatherr
_open
log
strtok
exit
_controlfp
_itow
__badioinfo
log10
__p__commode
_except_handler3
__set_app_type
__p__fmode
advapi32
RegEnumKeyW
RegQueryValueA
OpenServiceW
RegCreateKeyExW
IsValidSid
RegEnumValueW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyA
RevertToSelf
SetSecurityDescriptorGroup
LookupPrivilegeValueW
RegFlushKey
comctl32
CreateStatusWindowA
ImageList_SetOverlayImage
ImageList_DragEnter
ImageList_DrawEx
ImageList_SetBkColor
ImageList_GetIconSize
PropertySheetW
ImageList_ReplaceIcon
ImageList_AddMasked
ImageList_SetImageCount
ImageList_EndDrag
ole32
CoInitializeEx
CreateItemMoniker
CoSetProxyBlanket
OleFlushClipboard
ProgIDFromCLSID
ReleaseStgMedium
OleGetClipboard
DoDragDrop
IsEqualGUID
CoTaskMemAlloc
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoA
VerInstallFileW
VerLanguageNameA
VerInstallFileA
GetFileVersionInfoSizeA
gdi32
FillRgn
OffsetRgn
SelectClipRgn
Polygon
SetColorAdjustment
EnumFontsA
SetWorldTransform
CreateDIBitmap
CreateRectRgnIndirect
CreateBitmap
GetCharWidthA
oleaut32
SetErrorInfo
CreateErrorInfo
GetErrorInfo
SafeArrayRedim
SafeArrayGetElement
shell32
SHGetSpecialFolderPathW
SHAppBarMessage
ExtractAssociatedIconW
SHGetDesktopFolder
SHGetSettings
ShellExecuteExA
SHCreateDirectoryExW
user32
SetFocus
FindWindowA
LoadIconA
MessageBeep
SetCapture
SetWindowTextA
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ