Static task
static1
Behavioral task
behavioral1
Sample
331ae051971f7bfe764139de53f798bf_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
331ae051971f7bfe764139de53f798bf_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
331ae051971f7bfe764139de53f798bf_JaffaCakes118
-
Size
187KB
-
MD5
331ae051971f7bfe764139de53f798bf
-
SHA1
3b2c9a5460d7f37beea9e9f402c8812e1b402a0d
-
SHA256
d5bbd6f65493169b229ba007464f83838c10135014d43ec66e89d0c465c09abc
-
SHA512
b8c42deaafc314cae1c40ed843f31d9d3b701f95bed26939b5e818a9d56ac5c2930eb826f36d53a0d0af86a070f8d0bdc1000c632c42987f8ad48297305a5f0b
-
SSDEEP
3072:WVhlgmSV8J4OVXgn/dT0EfxAIxVg8GATbEd1vNuA4xi:Wv+q3VmpxhxVjbO1vNu9x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 331ae051971f7bfe764139de53f798bf_JaffaCakes118
Files
-
331ae051971f7bfe764139de53f798bf_JaffaCakes118.exe windows:4 windows x86 arch:x86
fbf48deb6a3740d0e5fe2e256946a66d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentStrings
IsBadReadPtr
GetModuleHandleA
lstrlenA
ExitProcess
LoadLibraryA
LoadLibraryExA
GetProcAddress
LocalAlloc
ExitThread
VirtualAllocEx
GetCommandLineW
GetVersionExA
GlobalAlloc
ole32
WriteClassStm
GetHGlobalFromStream
comctl32
ImageList_Create
ImageList_Remove
msvcrt
exit
acos
sin
rand
srand
memset
swprintf
asin
clock
user32
GetSystemMenu
IsWindowUnicode
shell32
SHFileOperationA
SHGetFolderPathA
SHGetFileInfoA
shlwapi
PathIsDirectoryA
SHGetValueA
SHDeleteValueA
SHStrDupA
PathGetCharTypeA
PathIsContentTypeA
SHDeleteKeyA
SHEnumValueA
SHQueryInfoKeyA
PathFileExistsA
gdi32
GetRgnBox
CreateBitmap
SetTextColor
LineTo
CreateCompatibleDC
GetDIBColorTable
oleaut32
OleLoadPicture
advapi32
RegCreateKeyA
version
VerQueryValueA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
Sections
CODE Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hdata Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 996B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ