Static task
static1
Behavioral task
behavioral1
Sample
30192222aa005e9af2bac408765e4173_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
30192222aa005e9af2bac408765e4173_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
30192222aa005e9af2bac408765e4173_JaffaCakes118
-
Size
294KB
-
MD5
30192222aa005e9af2bac408765e4173
-
SHA1
ac075b08c921bd178de79b25634b41bf8823d5e3
-
SHA256
1181126b96395241fce7599ddc9c6dafcb7672a70b516a0247455a32c6b3bcf9
-
SHA512
66c02689fa0de01489c947bf450830d7f78c20784397d358bd3cf05d38f8e32120dd39e6b02c83b38edfade983d7db4111633e80ec85f8eff0051843dea6ba2a
-
SSDEEP
6144:kDfya76XpSWbSBze4DGztvAycInW98PZNmdJ8pDvhLBGZFqIhO3U:EEB9h1rWgDF4bU3U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30192222aa005e9af2bac408765e4173_JaffaCakes118
Files
-
30192222aa005e9af2bac408765e4173_JaffaCakes118.exe windows:4 windows x86 arch:x86
a23da1a069762fd30f58281f053e9a7c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetNextDlgGroupItem
GetDlgItemTextA
GetParent
MessageBoxExA
WindowFromPoint
SetSysColors
CreateDialogIndirectParamA
CascadeWindows
GetDialogBaseUnits
GetDlgItemInt
IsWindow
GetLastActivePopup
DeferWindowPos
ArrangeIconicWindows
IsChild
ole32
OleQueryCreateFromData
CoFreeAllLibraries
CoInitialize
OleRegEnumVerbs
RegisterDragDrop
OleRegGetMiscStatus
OleGetClipboard
CoRegisterMallocSpy
GetClassFile
OleLoadFromStream
oleaut32
OleCreatePropertyFrame
kernel32
GetSystemDefaultLangID
GetModuleHandleA
VirtualAlloc
IsBadCodePtr
GlobalFree
GlobalLock
GetProcAddress
GetSystemDefaultLCID
GlobalReAlloc
GlobalHandle
GetNumberFormatA
LocalHandle
HeapCreate
ReleaseSemaphore
VirtualProtect
GetStartupInfoA
GlobalMemoryStatus
ResetEvent
InitializeCriticalSection
msvcrt
__setusermatherr
__getmainargs
_controlfp
_except_handler3
_acmdln
exit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_XcptFilter
_exit
_initterm
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 277KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ