Static task
static1
Behavioral task
behavioral1
Sample
2455fbe30c2cba98ec33228afdaafe82_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2455fbe30c2cba98ec33228afdaafe82_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2455fbe30c2cba98ec33228afdaafe82_JaffaCakes118
-
Size
148KB
-
MD5
2455fbe30c2cba98ec33228afdaafe82
-
SHA1
0db3d5676822ea91df89897f241e1f98f0f65446
-
SHA256
ea27b0bb5a62c2885b36228a1d71e4ecc037c2d559771c39222ca568c282c448
-
SHA512
5194d583bf7d951ad07a39c69c567ad3cab13a2f52d3bdf7d24bb454fbf8327c53a81259886d1895d326d7280d803bef6f791058869f558248afac5b46216959
-
SSDEEP
3072:sruLnK2TtvOyIySz7vELN5vnvBonSwOgdEmznP1p3wKjR:RBOzor+nUgXztp3w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2455fbe30c2cba98ec33228afdaafe82_JaffaCakes118
Files
-
2455fbe30c2cba98ec33228afdaafe82_JaffaCakes118.exe windows:5 windows x86 arch:x86
928f8fce1679a596037001ca5bbc1dae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetSystemDirectoryA
IsBadCodePtr
SetHandleCount
GetModuleHandleA
QueryPerformanceCounter
GetStartupInfoA
VirtualProtect
GetVersion
user32
SetScrollPos
AdjustWindowRectEx
ClientToScreen
TranslateMessage
DestroyMenu
SetRect
UnregisterClassA
GetSysColor
SetActiveWindow
PtInRect
msvcrt
log10
exit
_setmode
_wcsupr
_initterm
_filbuf
_except_handler3
__p__fmode
_adjust_fdiv
_XcptFilter
__set_app_type
isxdigit
__p__commode
_wcslwr
__setusermatherr
_setjmp3
_acmdln
__getmainargs
abort
_c_exit
advapi32
LookupPrivilegeValueW
RegDeleteValueW
CryptAcquireContextA
RegOpenKeyW
ControlService
RegFlushKey
CryptGenRandom
RegCloseKey
RegEnumValueW
oleaut32
SetErrorInfo
SafeArrayPtrOfIndex
SafeArrayGetUBound
GetErrorInfo
SafeArrayCreate
ole32
DoDragDrop
CoInitialize
CLSIDFromString
OleUninitialize
CreateILockBytesOnHGlobal
OleIsCurrentClipboard
CoTaskMemFree
shell32
SHGetPathFromIDList
SHGetPathFromIDListW
SHBindToParent
SHAppBarMessage
ExtractAssociatedIconW
SHGetFolderPathA
comctl32
ImageList_Create
ImageList_EndDrag
ImageList_AddMasked
ImageList_DragLeave
CreatePropertySheetPageW
ImageList_Remove
DestroyPropertySheetPage
ImageList_LoadImageW
ImageList_GetImageCount
ImageList_SetBkColor
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE