Static task
static1
Behavioral task
behavioral1
Sample
34851dd4a15bbb5a80e504d51d3256bc_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
34851dd4a15bbb5a80e504d51d3256bc_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
34851dd4a15bbb5a80e504d51d3256bc_JaffaCakes118
-
Size
534KB
-
MD5
34851dd4a15bbb5a80e504d51d3256bc
-
SHA1
d203bfb80a0d1044997eb84e6620dff1aa4eae94
-
SHA256
c12a35e412c3bffd215ee3d5343545bedcddfd7bd5917cf53539436fcd518dc7
-
SHA512
9b656bf6f770efff100c0cc277fbf8ec5577ad1c2f25d8e62f6b73e3eb8c527e97018d124452ce353ec03af1a99af5f1f1d6b5eaf2c0e170dedd791796af43c6
-
SSDEEP
12288:WdgWALkWb7bWnGyMzwFFv2Rkxrn7Dm/XaOOzw2ixmvHWyOKQuA:WuWATb7bWnGqFF1Znyn2XfWyDA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34851dd4a15bbb5a80e504d51d3256bc_JaffaCakes118
Files
-
34851dd4a15bbb5a80e504d51d3256bc_JaffaCakes118.exe windows:4 windows x86 arch:x86
9f1984f50252ab4866eabe54ff15d6ec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCreateKeyA
RegSetValueW
user32
LoadBitmapW
DefFrameProcW
PostMessageW
GetClassNameW
UnhookWindowsHookEx
PostThreadMessageW
DrawEdge
GetMessageTime
SetScrollInfo
AdjustWindowRectEx
OpenClipboard
ShowWindow
SetTimer
GetUpdateRgn
RegisterHotKey
BeginPaint
RedrawWindow
KillTimer
PtInRect
InsertMenuW
GetWindowTextW
GetWindowRect
kernel32
LCMapStringA
LoadLibraryA
MultiByteToWideChar
HeapReAlloc
GetProcAddress
GetStringTypeW
LCMapStringW
GetStringTypeA
InterlockedIncrement
InterlockedDecrement
VirtualFree
HeapDestroy
HeapCreate
GetEnvironmentVariableA
GetModuleHandleA
GetVersionExA
SetLastError
TlsAlloc
GetLastError
TlsGetValue
LeaveCriticalSection
InitializeCriticalSection
EnterCriticalSection
RtlUnwind
HeapFree
WriteFile
GetCPInfo
HeapAlloc
GetOEMCP
GetACP
VirtualAlloc
TlsSetValue
GetCurrentThreadId
GetStartupInfoA
GetFileType
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetEnvironmentStringsW
GetStdHandle
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
TerminateProcess
GetVersion
GetCurrentProcess
GetCommandLineA
CreateFileW
ExitProcess
SetFilePointer
Sections
.text Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 460KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ