Static task
static1
Behavioral task
behavioral1
Sample
2623b65822758fcd476d53ac0f7b6d48_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2623b65822758fcd476d53ac0f7b6d48_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2623b65822758fcd476d53ac0f7b6d48_JaffaCakes118
-
Size
147KB
-
MD5
2623b65822758fcd476d53ac0f7b6d48
-
SHA1
6c6ac8b906a3f7385f7c840b8ce03fece62020f0
-
SHA256
35a6725433b50d9765303959c5c81411a07a71e9bfe7c2f774191bd52895fd2a
-
SHA512
e280ff71a9f839769d30b1505d85aee650f2229f40275d4acaf458ae80ab0ce56fd0e7d518973ed1ed195ac65e9d3f1d2ad9e87e013f0fdb4cbbd9386c498e99
-
SSDEEP
3072:hW9j5crpBauJYEYdtuRCPbcZ6gk0zbdB15SdF5jUxvTwkwhZh/FNYg35fLZ:uMYaUcZ6Uzbmf4XEtNr3t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2623b65822758fcd476d53ac0f7b6d48_JaffaCakes118
Files
-
2623b65822758fcd476d53ac0f7b6d48_JaffaCakes118.exe windows:5 windows x86 arch:x86
0130f6f493bd0cbab112014ec0205cad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
WideCharToMultiByte
VirtualProtect
FileTimeToLocalFileTime
SetFilePointer
GetModuleHandleA
GetStartupInfoA
CreateProcessA
GetStdHandle
VirtualAlloc
RemoveDirectoryA
lstrlenA
GetStringTypeW
CreateFileMappingA
InterlockedDecrement
GetUserDefaultLangID
GetCPInfo
GetTickCount
CopyFileA
msvcrt
__set_app_type
_controlfp
_adjust_fdiv
__p__fmode
exit
__getmainargs
_except_handler3
_initterm
log10
bsearch
__p__commode
__setusermatherr
_acmdln
_XcptFilter
strncmp
fgetc
shell32
SHGetSpecialFolderLocation
ShellExecuteExW
SHGetPathFromIDListW
DragQueryFile
ExtractIconA
SHCreateDirectoryExA
comctl32
ImageList_GetImageInfo
ImageList_Replace
ImageList_Create
ImageList_GetIcon
PropertySheetW
ImageList_SetBkColor
ImageList_AddMasked
CreateToolbarEx
ImageList_SetImageCount
ImageList_DragLeave
ImageList_Draw
advapi32
LookupPrivilegeValueA
RegDeleteKeyW
OpenServiceA
RegDeleteKeyA
RegOpenKeyW
RegEnumKeyA
RegDeleteValueW
CryptAcquireContextA
RegEnumValueW
version
GetFileVersionInfoSizeW
VerLanguageNameA
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoW
VerInstallFileW
oleaut32
GetActiveObject
SafeArrayGetUBound
VariantCopy
SysAllocStringByteLen
VariantInit
SysStringByteLen
SetErrorInfo
VariantClear
SafeArrayGetElement
VariantCopyInd
user32
GetDCEx
MessageBoxA
GetMenu
SetWindowsHookExA
SetActiveWindow
EndDialog
IsRectEmpty
SetWindowPos
ole32
StgOpenStorage
CoTaskMemFree
CreateILockBytesOnHGlobal
CoCreateInstance
OleSetClipboard
OleSetMenuDescriptor
gdi32
CreateEnhMetaFileA
DeleteEnhMetaFile
TextOutW
ExtSelectClipRgn
DeleteMetaFile
EnumFontFamiliesW
CreatePenIndirect
EnumFontFamiliesExW
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 17KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 111KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ