Static task
static1
Behavioral task
behavioral1
Sample
296a15874ebef859eb677a34934fcc3d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
296a15874ebef859eb677a34934fcc3d_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
296a15874ebef859eb677a34934fcc3d_JaffaCakes118
-
Size
144KB
-
MD5
296a15874ebef859eb677a34934fcc3d
-
SHA1
ab02e2676e8d2d6917fc1af332a68c4e611d92f9
-
SHA256
fcbeaff757f7d5ce5d186b9f3ccb5abda17824cfab0a77f3d6b301af9dbc2ff5
-
SHA512
4bbc7a41e67a40fc66fdb3001f294a1deed790cb504e9c08e8415eb717e956e5d4f60ad4af1a11b5bfe87e6f512167b184c7cf4dc1ad1a6c814b5a03cba466e8
-
SSDEEP
3072:VMAZYjgra62Jk6ZnYieHdzm1ZaRXT+d12WiAoDdN:r0gratnYX9aZwXT+X2n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 296a15874ebef859eb677a34934fcc3d_JaffaCakes118
Files
-
296a15874ebef859eb677a34934fcc3d_JaffaCakes118.exe windows:4 windows x86 arch:x86
cc61b96f47e8d37fdcefcb14bfc42fdf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetFileAttributesA
VirtualProtect
FileTimeToLocalFileTime
SetEnvironmentVariableA
CreateProcessW
GetVersionExW
MulDiv
GetStartupInfoA
GetModuleHandleA
msvcrt
wcsncmp
_initterm
__set_app_type
__setusermatherr
_adjust_fdiv
_except_handler3
__getmainargs
exit
__p__commode
__p__fmode
log
_XcptFilter
strcmp
wcsncpy
fsetpos
_acmdln
_wcsicmp
user32
TranslateMessage
GetMenuItemID
CloseClipboard
InvalidateRect
LoadStringA
IsIconic
LoadCursorA
EndPaint
GetSystemMetrics
GetCursorPos
oleaut32
GetErrorInfo
VariantCopy
SafeArrayUnaccessData
SetErrorInfo
SafeArrayGetUBound
SysReAllocStringLen
VariantCopyInd
SafeArrayPutElement
VariantInit
SafeArrayCreate
SysStringByteLen
ole32
CoCreateGuid
IsAccelerator
CoRegisterClassObject
RegisterDragDrop
OleSetMenuDescriptor
StgOpenStorageOnILockBytes
OleRun
CoRevokeClassObject
CreateItemMoniker
DoDragDrop
CLSIDFromProgID
version
VerInstallFileA
VerInstallFileW
GetFileVersionInfoW
VerQueryValueW
VerQueryValueA
shell32
ExtractIconExW
SHGetSpecialFolderPathA
ExtractIconW
SHGetFolderPathA
DragQueryFileA
SHBrowseForFolder
SHGetSpecialFolderPathW
SHChangeNotify
gdi32
PlayMetaFileRecord
SetWinMetaFileBits
SetWindowOrgEx
MaskBlt
GetTextAlign
EndDoc
GetCurrentObject
StartDocW
comctl32
ImageList_GetBkColor
ImageList_Add
ImageList_DragEnter
ImageList_Destroy
ImageList_Read
ImageList_EndDrag
ImageList_BeginDrag
PropertySheetW
advapi32
IsValidSid
OpenServiceA
RegOpenKeyExW
AllocateAndInitializeSid
OpenServiceW
Sections
.text Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ