Static task
static1
Behavioral task
behavioral1
Sample
249d157cdcd641f2d1198b092029c8aa_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
249d157cdcd641f2d1198b092029c8aa_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
249d157cdcd641f2d1198b092029c8aa_JaffaCakes118
-
Size
104KB
-
MD5
249d157cdcd641f2d1198b092029c8aa
-
SHA1
9a028571a1ebdac7f736812f32f2242265537ddc
-
SHA256
12b65c40f18800b91d3e0c64ef221eb03077d5b56924249c4430f4e8dc3611de
-
SHA512
d27e07ba52d25d27d1b457c091ced6504858b90c1d9e7948cd97a2629b61f73095cdf8ef769645a071599c9ed30b05da7508983bd2dea3259fef5b4a495d3e51
-
SSDEEP
3072:9U6VIDut/Wwafzc5QBjTtM9Px+wgy15LCt:SQegewafMQBjTt45+v+J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 249d157cdcd641f2d1198b092029c8aa_JaffaCakes118
Files
-
249d157cdcd641f2d1198b092029c8aa_JaffaCakes118.exe windows:5 windows x86 arch:x86
43910c46f39a1d562ab0bf5ff876962b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
strcspn
__p__commode
_stat
toupper
_exit
perror
_adjust_fdiv
_initterm
__set_app_type
_assert
exit
__setusermatherr
_acmdln
_lseek
sqrt
isxdigit
_except_handler3
__p__fmode
__getmainargs
fseek
ceil
fprintf
tolower
_XcptFilter
fgetc
_getch
kernel32
QueryPerformanceCounter
GetWindowsDirectoryA
GlobalAlloc
SetCurrentDirectoryA
GetTickCount
FreeEnvironmentStringsW
WideCharToMultiByte
GetVersionExW
GetUserDefaultLangID
GetStartupInfoA
IsValidCodePage
WaitForSingleObject
GetCurrentProcess
VirtualProtect
SetFilePointer
GetModuleHandleA
user32
GetDesktopWindow
SetClipboardData
KillTimer
GetClassNameA
TranslateMessage
FillRect
GetSysColorBrush
InsertMenuItemA
IsRectEmpty
DispatchMessageA
DestroyMenu
GetSystemMenu
DialogBoxParamA
SetWindowLongA
oleaut32
SafeArrayUnaccessData
SysAllocStringByteLen
SysFreeString
SysStringLen
SysStringByteLen
SysReAllocStringLen
SysAllocStringLen
SafeArrayGetElement
LoadTypeLib
GetErrorInfo
SafeArrayGetUBound
VariantCopyInd
VariantClear
advapi32
AllocateAndInitializeSid
FreeSid
RegQueryInfoKeyW
OpenSCManagerA
SetSecurityDescriptorGroup
RegSetValueExW
RegCreateKeyExA
SetSecurityDescriptorDacl
Sections
.text Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ