Static task
static1
Behavioral task
behavioral1
Sample
3137a6185549e99886d7479ddd9eace9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3137a6185549e99886d7479ddd9eace9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3137a6185549e99886d7479ddd9eace9_JaffaCakes118
-
Size
153KB
-
MD5
3137a6185549e99886d7479ddd9eace9
-
SHA1
060a9a6ce9a202a6ebc3514697e9eaae42b702a1
-
SHA256
6b4fd3fa717df350f396127b4cd3f5121b0b9ecc2629e46b52aa96838b287594
-
SHA512
3c3eb429d2796cbe115c50b946a34320ee59307c0863c33645b3b7ce9213815f08089064f1aa929b4da26fd33baf51fed6efb1626ed8ffcbd3e4eee0f0d3c091
-
SSDEEP
3072:t834YluPB2eTreFD+miH3cqbmiJF9oCSv1KaPO0ZqbvBVR8ZOC2fXP:K5uQKmiH3c4mMSv1KaPKCY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3137a6185549e99886d7479ddd9eace9_JaffaCakes118
Files
-
3137a6185549e99886d7479ddd9eace9_JaffaCakes118.exe windows:5 windows x86 arch:x86
db8d116d9caeeb2128abb935d2bcc142
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateProcessW
SetCurrentDirectoryA
GetStartupInfoA
GetSystemDirectoryW
GetModuleFileNameA
VirtualProtect
GetModuleHandleA
msvcrt
_adjust_fdiv
_acmdln
_unlock
_controlfp
_wcsicmp
srand
putchar
log
__p__commode
__setusermatherr
__p__fmode
exit
__getmainargs
sin
_except_handler3
_XcptFilter
swprintf
free
_initterm
_snwprintf
__set_app_type
user32
OemToCharA
GetMenuItemCount
FillRect
GetClassNameA
GetCursorPos
PtInRect
CreateMenu
TranslateMessage
GetMenuItemID
EnableMenuItem
DeleteMenu
PostQuitMessage
SendDlgItemMessageA
SetRect
GetWindow
ole32
CoInitializeSecurity
CoGetClassObject
IIDFromString
IsAccelerator
OleUninitialize
StgOpenStorageOnILockBytes
CoReleaseMarshalData
CreateILockBytesOnHGlobal
StringFromGUID2
OleIsCurrentClipboard
CLSIDFromProgID
CoInitialize
ProgIDFromCLSID
OleFlushClipboard
RevokeDragDrop
advapi32
OpenThreadToken
OpenSCManagerW
OpenServiceW
CryptAcquireContextA
GetSecurityDescriptorDacl
FreeSid
RegCreateKeyExA
comctl32
ImageList_BeginDrag
ImageList_Create
ImageList_DragShowNolock
ImageList_Remove
ImageList_SetBkColor
ImageList_GetImageCount
ImageList_Replace
ImageList_Add
ImageList_GetIconSize
CreateStatusWindowA
oleaut32
CreateErrorInfo
VariantCopy
VariantClear
gdi32
CreateDIBPatternBrushPt
ExcludeClipRect
CreateMetaFileW
StretchDIBits
GetOutlineTextMetricsA
GetPaletteEntries
CreateDCA
GetWindowExtEx
SetColorAdjustment
shell32
Shell_NotifyIconA
DragFinish
SHGetSpecialFolderPathA
ShellExecuteExA
SHAppBarMessage
SHAddToRecentDocs
DragAcceptFiles
SHFileOperationW
SHCreateDirectoryExA
version
VerLanguageNameA
VerFindFileW
GetFileVersionInfoW
VerInstallFileW
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE