Static task
static1
Behavioral task
behavioral1
Sample
293cafa91b148f3903ec80d6a1bd6494_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
293cafa91b148f3903ec80d6a1bd6494_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
293cafa91b148f3903ec80d6a1bd6494_JaffaCakes118
-
Size
280KB
-
MD5
293cafa91b148f3903ec80d6a1bd6494
-
SHA1
6f1ce499100743a55fd0c0b1a6c0ed0ace93593a
-
SHA256
18b9eb455954de9cc7c41e01636b2dea8fdd9555aa7f22030535a7bc3ddd7701
-
SHA512
c6e01990f6b9c02272ed23f247670bb6bc6a92dc6a04da02af3ba890069932979e1875335486555d6cfa67ce6ad1cf4a0123663c4eef7e1a971c7da48d309d89
-
SSDEEP
6144:Y4cX+erngmgSgLAtkzQUjxk1L3OgiddHFeQA6brq8AZeqs:R4rg+0pkJMdleQJCE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 293cafa91b148f3903ec80d6a1bd6494_JaffaCakes118
Files
-
293cafa91b148f3903ec80d6a1bd6494_JaffaCakes118.exe windows:4 windows x86 arch:x86
e8a84fbb619ba86cf3a7bb1736202502
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetFileInfoW
Shell_NotifyIconA
SHChangeNotify
kernel32
GetCurrentDirectoryW
LoadResource
GetConsoleCP
GetConsoleOutputCP
GetDiskFreeSpaceExW
DeviceIoControl
GetVersion
CreateFileMappingA
GlobalReAlloc
SetFileTime
FindNextFileA
DuplicateHandle
ReleaseMutex
GetPrivateProfileStringW
GetSystemDefaultLCID
lstrcatA
GetUserGeoID
SetFilePointer
GetTimeZoneInformation
CreateFileA
WritePrivateProfileStringW
GetFileAttributesW
FindFirstFileW
DeleteTimerQueueEx
GetVolumeInformationW
GetSystemDirectoryA
RemoveDirectoryA
FindResourceExA
GetSystemTimeAsFileTime
MoveFileExA
SetWaitableTimer
CompareStringW
CreateFileW
OpenMutexW
GetFileSize
CreateFileMappingW
InterlockedDecrement
GetFullPathNameA
QueueUserWorkItem
WriteConsoleW
GetPrivateProfileIntA
SetConsoleCtrlHandler
_lopen
MoveFileW
VirtualQueryEx
GetUserDefaultUILanguage
DeleteCriticalSection
VirtualAlloc
GetStartupInfoA
GetModuleHandleA
CompareStringA
comctl32
ImageList_ReplaceIcon
ImageList_BeginDrag
ImageList_SetDragCursorImage
ImageList_DragMove
ImageList_Add
advapi32
ControlService
FreeSid
GetAclInformation
CryptCreateHash
InitializeAcl
GetSidLengthRequired
RegisterServiceCtrlHandlerW
SetServiceStatus
RegOpenKeyW
RegOpenKeyExA
MakeAbsoluteSD
shlwapi
PathRenameExtensionW
StrRChrW
StrChrW
user32
SetDlgItemInt
GetMenuState
LoadAcceleratorsW
InvalidateRect
MoveWindow
MapDialogRect
WaitMessage
TrackPopupMenuEx
DdeQueryNextServer
CreateDialogIndirectParamW
SetWindowsHookExA
DrawTextW
OemToCharBuffA
ReplyMessage
IsClipboardFormatAvailable
oleaut32
SysFreeString
msvcrt
_mbsrchr
strncpy
realloc
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
wcsrchr
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
wcscmp
_msize
time
_ecvt
_c_exit
_wcslwr
iswspace
strrchr
srand
setlocale
free
_ltow
wcsspn
wcslen
wcstol
localtime
iswdigit
_fpreset
_cexit
_wcsnicmp
_wtoi
_wcsdup
_strnicmp
_ismbblead
qsort
_controlfp
wcscpy
_errno
_strlwr
wcstoul
swscanf
_wsplitpath
wcsncpy
_wcsupr
wcsstr
_expand
iswalnum
_wtoi64
_stricmp
_exit
wcscspn
isdigit
bsearch
_vsnprintf
_setmbcp
tolower
towupper
_snwprintf
_purecall
Sections
.text Size: 224KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ