Static task
static1
Behavioral task
behavioral1
Sample
35919c511ffd8f61d8865dacb611db78_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
35919c511ffd8f61d8865dacb611db78_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
35919c511ffd8f61d8865dacb611db78_JaffaCakes118
-
Size
232KB
-
MD5
35919c511ffd8f61d8865dacb611db78
-
SHA1
8671f7c07bf2e0ebae263cdf70958c62b9fa16d1
-
SHA256
cb317a5970514e5b93a9675a1809c95bd313f7e892eea8e2efda28db7a6fb91d
-
SHA512
cc55868c9dde3f889a8d41a9cf9e088bb0f2013f588332f18eb2116bc53c31bbc3b2205571c739be1fb19c749e3edfd5a88aa0020eecfa72fd2ad53025bbedb8
-
SSDEEP
3072:g3sSQXPI0pEaM1ouT0pIBHaaghu9HQyw/wU2CSHOUvRBwkbHb1sRz5+a/CTPirEq:SuXPBEh30azghWQywoOuOU/zbOd/bTN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35919c511ffd8f61d8865dacb611db78_JaffaCakes118
Files
-
35919c511ffd8f61d8865dacb611db78_JaffaCakes118.exe windows:4 windows x86 arch:x86
3b58b25f27550ca3c7ca0c0df163266f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegSetValueW
RegQueryValueExA
RegCloseKey
RegOpenKeyW
user32
GetSystemMetrics
DrawEdge
SetWindowRgn
CheckMenuRadioItem
OpenClipboard
DestroyMenu
ReleaseCapture
ExitWindowsEx
DrawStateW
EndPaint
LoadBitmapW
GetWindowThreadProcessId
MoveWindow
GetUpdateRect
GetDlgItem
CreateDialogIndirectParamW
GetUpdateRgn
ReleaseDC
DispatchMessageW
DestroyCursor
UpdateWindow
SetCursor
DrawTextW
ShowWindow
CreateAcceleratorTableW
DestroyAcceleratorTable
UnregisterClassW
CreateWindowExW
EnumClipboardFormats
AdjustWindowRectEx
CreatePopupMenu
UnionRect
GetCapture
IsWindowVisible
TranslateMDISysAccel
GetAsyncKeyState
AppendMenuW
DefWindowProcW
SystemParametersInfoW
GetParent
kernel32
InterlockedDecrement
InterlockedIncrement
HeapReAlloc
GetOEMCP
VirtualAlloc
HeapAlloc
GetCPInfo
GetACP
LCMapStringA
MultiByteToWideChar
GetProcAddress
LoadLibraryA
GetStringTypeA
LCMapStringW
GetStringTypeW
TlsSetValue
GetCurrentThreadId
GetStdHandle
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetModuleFileNameA
GetCurrentProcess
UnhandledExceptionFilter
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetVersionExA
GetModuleHandleA
GetEnvironmentVariableA
SetLastError
TlsAlloc
GetLastError
HeapFree
VirtualFree
HeapDestroy
HeapCreate
WriteFile
RtlUnwind
EnterCriticalSection
TerminateProcess
GetVersion
ExitProcess
TlsGetValue
InitializeCriticalSection
ReadFile
GetCommandLineA
CloseHandle
TlsFree
ConvertThreadToFiber
LeaveCriticalSection
TerminateThread
Sections
.text Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ